royalcrest-lorin[.]net
“Royalcrest Lorin — Official Crypto Trading Platform with AI Autopilot, Verified Security and Stable…”
royalcrest-lorin.net — Konten tidak tersedia. Peniruan identitas merek: Foundation; Jenis penipuan: Fake Exchange. Ringkasan bukti: VirusTotal 2/94 (Netcraft, SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrar: NameCheap.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain royalcrest-lorin.net was registered on March 06, 2026 through NameCheap, Inc. and resolves to the IP address 188.114.97.3, which belongs to Cloudflare (AS13335) in the United States. The site presents itself as a cryptocurrency trading platform, as indicated by the page title "Royalcrest Lorin — Official Crypto Trading Platform with AI Autopilot, Verified Security and Stable Results" and the classified scam type of a fake exchange. Infrastructure analysis shows the domain is served via Cloudflare’s DNS, using the nameservers vivienne.ns.cloudflare.com and wesley.ns.cloudflare.com, and is protected by a Let's Encrypt certificate (E8). Security monitoring has placed the domain on three blocklists and it is actively blocked by PhishDestroy, MetaMask, and SEAL.
VirusTotal scans report that two of ninety‑four security vendors flagged the domain, reinforcing its malicious posture. The current operational status is offline, but historical activity suggests a recent launch aimed at deceiving cryptocurrency users. Defenders should continue to block royalcrest-lorin.net at the DNS level and add its resolved IP 188.114.97.3 to network‑level deny lists, recognizing that Cloudflare may host additional malicious payloads under the same ASN.
Monitoring of NameCheap‑registered domains that employ the vivienne.ns.cloudflare.com or wesley.ns.cloudflare.com nameservers for similar registration dates is advised, as threat actors often reuse registrar and DNS configurations. Organizations should also incorporate the two VirusTotal detections into their threat intelligence feeds to improve early warning capabilities. Finally, security teams should educate users about the fake exchange narrative and the promise of AI‑driven trading, emphasizing that legitimate platforms rarely use generic titles such as "Official Crypto Trading Platform with AI Autopilot" and will not be listed on blocklists like PhishDestroy or SEAL.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
PD-20260306-6C8450 Recipient: abuse@namecheap.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive