solmy[.]cfd
“Phantom: The crypto Airdrop for everyone”
साक्ष्य सारांश
The domain solmy.cfd was registered on February 21, 2026 through Global Domain Group LLC and is presently taken offline. Technical checks show the zone is delegated to Cloudflare’s authoritative name servers memphis.ns.cloudflare.com and sierra.ns.cloudflare.com, resolving to the IPv4 address 172.67.221.58, which belongs to AS13335 Cloudflare, Inc. in the United States. No TLS certificate is presented for the host, indicating that HTTPS was never configured before the takedown. VirusTotal has recorded 14 detections out of 93 scanned scanners, and the domain appears on a single external blocklist.
PhishDestroy has already added the host to its block list, reinforcing the assessment. The page title retrieved before shutdown reads "Phantom: The crypto Airdrop for everyone," explicitly referencing the Phantom brand and matching the listed brand target. The observed kit is identified as an "Airdrop Scam," classifying the activity as a crypto‑focused impersonation campaign. While the site is no longer reachable, the infrastructure footprint remains useful for threat hunting: the Cloudflare IP range is shared by many legitimate services, so defenders should not block the entire ASN but should flag any future DNS records that map to the same IP address or its immediate neighbors for the same brand keywords.
Continuous monitoring of the registrar Global Domain Group LLC for new registrations that mimic Phantom or other crypto projects is advised. Adding solmy.cfd to internal deny lists, updating URL filtering rules, and correlating any user‑reported phishing attempts with the observed page title will help reduce exposure. The limited number of blocklist entries and the modest VirusTotal detection count suggest the campaign was relatively small, yet the brand impersonation heightens risk for users seeking legitimate airdrops.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260214-EDDA2B- PDF दस्तावेज़
- PDF प्रमाण
प्रमाण का पूरा पाठ
Acceptable Use Policy (AUP): The domain solmy.cfd is engaged in phishing activities, which directly contravenes the AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The use of this domain for phishing purposes constitutes a violation of the TOS, which reserves the right to suspend or terminate services for any illegal or fraudulent activities.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA) - 18 U.S.C. § 1030: This federal law prohibits unauthorized access to computers and the use of such access to commit fraud.
Wire Fraud - 18 U.S.C. § 1343: Engaging in schemes to defraud individuals or entities using electronic communications is a violation of this law.
CAN-SPAM Act - 15 U.S.C. § 7701: This act regulates commercial email and prohibits deceptive practices, including phishing.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to liability under applicable laws and regulations. Continued hosting of this phishing domain could result in regulatory scrutiny and potential legal consequences.
Data Coverage
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 10/08/2026
पहचान समयरेखा
-
Cloudflare Radar
Cloudflare Radar स्कैन संग्रहीत · स्कैन खोलें
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
SHORTDOT ज़ोन · सार्वजनिक साक्ष्य
.cfd
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
वायरसटोटल विश्लेषण
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।