diamondorpaper[.]fun

Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.

Analysis indicates that the domain diamondorpaper.fun was created on February 21, 2026. The site displayed a page titled “Diamond or Paper Hands? – Test Your Crypto Resolve” and is classified as a crypto scam that impersonates the Ethereum brand. Independent reputation services rate the domain extremely poorly: Gridinsoft assigned a trust score of 0 out of 100, and Scamadviser reported a score of 1 out of 100, both suggesting a high probability of malicious activity. DNS resolution points to IP address 51.254.178.24, which belongs to ASN 16276 (OVH SAS) and is geolocated in France.

The domain uses three njalla nameservers – 3-get.njalla.in, 1-you.njalla.no, and 2-can.njalla.in – a pattern often seen in disposable or quickly‑re‑hosted malicious infrastructure. An SSL certificate identified only as “E5” is present; the certificate’s low trust rating offers no indication of legitimacy. VirusTotal logged a single positive detection out of 95 scanning engines, confirming that at least one security vendor flagged the domain as malicious. The domain is listed on two public blocklists, PhishDestroy and ScamSniffer, reinforcing its recognition by anti‑phishing communities.

Current probing shows the site is offline, but historical evidence demonstrates it was active after registration. Defenders should block both the domain and its hosting IP at network perimeters, add the domain to internal threat‑intel feeds, and monitor the listed njalla nameservers for any re‑activation. Because the actual page content has not been captured, the specific luring mechanisms and any embedded payloads remain uncertain; security teams should attempt to archive the site if it resurfaces. Ongoing surveillance of the OVH hosting range is recommended, as the provider has been associated with other cryptocurrency‑related fraud campaigns.