copperinuctofun[.]world

The domain copperinuctofun.world was observed for the first time on March 23, 2026 and is currently offline. Registration data indicates it was created through OwnRegistrar, Inc., and the authoritative nameservers listed are lyyn.ns.cloudflare.com and walk.ns.cloudflare.com, suggesting the use of Cloudflare’s DNS service. Network resolution points to IP address 188.114.97.3, which is an address owned by Cloudflare, Inc. and geolocated to Canada. The TLS certificate presented by the site is issued by Let’s Encrypt (certificate identifier E7), which is typical for short‑lived, automated certificates and does not provide any indication of legitimate ownership.

Threat intelligence sources show that the domain appears on three public blocklists and has been cited in two AlienVault OTX pulses, confirming that it has been actively shared among security analysts. Gridinsoft assigns a trust score of 0 out of 100, reflecting extreme suspicion. VirusTotal analysis reveals that four of ninety‑four scanning engines flagged the domain, and it is also listed by the anti‑phishing services PhishDestroy, MetaMask, and SEAL. These detections, together with the low trust score and blocklist presence, support an elevated risk classification.

The available data does not include a page title, brand target, or detailed payload description, so the precise content of the phishing lure remains unknown. Defenders should immediately block the domain and its associated IP address at network perimeters, update intrusion‑detection signatures to include the observed hostnames and certificates, and monitor Cloudflare‑derived address ranges for any re‑use of the same infrastructure. Continuous re‑query of VirusTotal and OTX is advisable in case new samples or additional detections appear, and any future resolution of the domain should be treated as high‑confidence malicious activity pending further forensic examination.