jdudkcjfu737[.]top
“Phase 2 Distribution”
jdudkcjfu737.top — Konten tidak tersedia. Peniruan identitas merek: Discord; Jenis penipuan: Fake Airdrop. Ringkasan bukti: VirusTotal 1/93 (SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrar: NameSilo.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis conducted on July 24, 2026 identifies jdudkcjfu737.top as an offline infrastructure associated with a fake Discord airdrop campaign. The domain was registered on February 27, 2026 through NameSilo, LLC and uses Cloudflare’s authoritative nameservers isla.ns.cloudflare.com and razvan.ns.cloudflare.com. DNS resolution points to IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No TLS certificate is present, indicating that the site was served over HTTP only. The sole page discovered during capture carried the title “Phase 2 Distribution,” consistent with the declared scam type of a “Fake Airdrop.” VirusTotal uploaded a sample of the site and recorded a single positive detection out of 93 scanning engines, confirming that at least one vendor identified malicious behavior.
The domain is listed on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, reflecting community consensus of its fraudulent nature. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the low credibility rating. Evidence does not disclose the exact content of the landing page, login flow, or any credential‑harvesting mechanisms because the site was taken offline before a full crawl could be completed. Consequently, the full scope of the attack vector remains uncertain, as does the presence of any additional payloads or redirect chains.
Defenders should add jdudkcjfu737.top and its resolving IP 188.114.97.3 to block lists at network perimeter and endpoint security layers. Monitoring for new domains that resolve to the same Cloudflare IP range or that reuse the “Phase 2 Distribution” title can help detect replications of this campaign. Users of Discord should be warned that unsolicited airdrop offers are not issued by the official Discord service, and any request to enter credentials or wallet information should be rejected.
Intelijen Keamanan Jaringan Registrar context
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260227-19E29D Recipient: abuse@namesilo.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive