defunglz[.]info

PhishDestroy identifies defunglz.info as an active generic phishing domain currently under investigation for hosting a fraudulent giveaway scam. The domain is being actively monitored due to its potential to deceive users into submitting personal or financial information under the guise of a prize offer. No specific brand impersonation has been confirmed at this stage, but the threat type aligns with common fake lottery or reward schemes designed to harvest credentials or payment details.

This domain was flagged by 2 of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely blacklisted by security solutions. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, defunglz.info resolves to IP 172.67.161.57 and utilizes a Let’s Encrypt SSL certificate for added legitimacy. The domain was created on April 12, 2026, suggesting a recently established infrastructure likely leveraged for short-lived campaigns. With no detections on VirusTotal and no presence on major blocklists, the threat remains under investigation but poses an emerging risk to uninformed users.

Given the domain’s active status and lack of widespread detection, PhishDestroy recommends immediate caution. Users should avoid interacting with defunglz.info and report any suspicious encounters to their IT security teams or through platforms like PhishDestroy’s threat submission portal. Organizations are advised to update firewall rules to block the domain and associated IP, 172.67.161.57, while monitoring for related campaigns. Proactive user education on recognizing fake giveaway scams is critical to mitigating potential exposure. The situation is evolving, and further updates will be provided as intelligence develops.