# distortedcoins.lol — SUSPICIOUS

> distortedcoins.lol linked to low-risk phishing detected and removed. Stay informed to avoid crypto scams and protect your assets.

## Summary
PhishDestroy has identified distortedcoins.lol as a low-risk generic phishing domain. Classified primarily for fraudulent intent, this domain was created recently on March 11, 2026, and appeared suspicious due to its association with cryptocurrency-themed phishing attempts. The page title "Just a moment..." suggests it was designed to mimic legitimate waiting or verification pages, a common tactic to deceive users.

Technical analysis reveals the domain resolved to IP address 172.67.158.137 and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com. Despite being flagged by only one out of ninety-five VirusTotal scanners, distortedcoins.lol appears on three separate security blocklists, underscoring its potential malicious nature. The domain name itself, referencing "distorted coins," aligns with typical phishing lures targeting cryptocurrency users.

Currently, distortedcoins.lol is offline, indicating swift action taken to mitigate threats from this domain. The presence on multiple blocklists and prompt takedown reduces the risk to end users. PhishDestroy continues to monitor similar infrastructures to protect individuals from evolving phishing campaigns. Users are advised to remain vigilant and verify domain authenticity before engaging.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 404)
- Page title: Just a moment...

## Domain Intelligence
- Registered: 2026-03-11 23:07:01
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 172.67.158.137
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["amos.ns.cloudflare.com", "maya.ns.cloudflare.com"]
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ce201-94f0-72eb-801d-ac9de2e163da.png
- PhishDestroy: https://phishdestroy.io/domain/distortedcoins.lol/
- LLM endpoint: https://phishdestroy.io/domain/distortedcoins.lol/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/distortedcoins.lol/
Last updated: 2026-03-19