MALICIOUS — HIGH
Análisis de phishing y seguridad de allurl.co.com
allurl[.]
This domain, allurl.co.com, was registered on 21 February 2026 and is presently listed as offline.
- VirusTotal
- 2/91
- Blocklists
- No stored match
- Disponibilidad
- Contenido no disponible · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
allurl.co.com — Contenido no disponible (HTTP 502). Suplantación de marca: PancakeSwap; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 2/91 (alphaMountain.ai, Gridinsoft); PhishDestroy score 63/100.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Evidence Analysis
This domain, allurl.co.com, was registered on 21 February 2026 and is presently listed as offline. The site’s title, “Pancakeswap – A Global Journey of Flavors | PancakeBatter,” indicates an attempt to reference the Pancakeswap brand, confirming a brand-impersonation intent. Infrastructure analysis shows the domain resolves to 172.67.132.1, an address owned by Cloudflare (AS13335) located in the United States. The SSL certificate presented is identified as WE1, which is typical for Cloudflare‑issued certificates but does not mitigate the brand‑spoofing risk.
The domain appears on a single blocklist, PhishDestroy, and VirusTotal records show that 1 of 93 scanning engines flagged the domain as malicious, reinforcing the suspicion of a crypto‑related scam. The reported scam type is “Crypto Scam,” consistent with the Pancakeswap brand focus on decentralized finance. No additional page content has been captured; therefore the exact payload, credential‑stealing mechanisms, or redirection behavior remain unknown.
Defenders should continue to block the domain at perimeter and DNS layers, monitor for newly‑registered domains that reuse the “pancakeswap” keyword or similar lexical patterns, and consider adding the IP address 172.67.132.1 to any Cloudflare‑related threat lists pending further attribution. Ongoing surveillance of PhishDestroy and other blocklists is advised to detect potential re‑hosting attempts. Because the site is already offline, immediate incident response is limited to containment and intelligence‑sharing actions.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Cobertura de los datos12 recorded checks
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Análisis de VirusTotal
Datos y informes externosIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.