# waroneusd1.lol — SUSPICIOUS

> waroneusd1.lol shows signs of phishing activity. Exercise caution and avoid interacting with this domain while investigations continue.

## Summary
PhishDestroy has identified waroneusd1.lol as a domain potentially involved in generic phishing campaigns. It was registered recently and is currently classified as under investigation pending further analysis.

The domain resolves to IP 188.114.96.3 and is registered through PDR Ltd. d/b/a PublicDomainRegistry.com. Although VirusTotal currently reports no detections, the domain appears on two security blocklists, suggesting suspicious activity associated with its infrastructure.

waroneusd1.lol remains active and under close monitoring. Users are advised to refrain from engaging with the site until more definitive findings emerge from ongoing investigations. PhishDestroy continues to track developments related to this threat.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Just a moment...

## Domain Intelligence
- Registered: 2026-03-07 17:07:01
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["audrey.ns.cloudflare.com", "rohin.ns.cloudflare.com"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/1t0ZTgPy/502288a78758.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/5f5f6e58-6731-448d-956f-0fdd87457a13
- Wayback Machine: https://web.archive.org/web/https://waroneusd1.lol
- PhishDestroy: https://phishdestroy.io/domain/waroneusd1.lol/
- LLM endpoint: https://phishdestroy.io/domain/waroneusd1.lol/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/waroneusd1.lol/
Last updated: 2026-03-19