rpunic[.]top
“Welcome to nginx!”
Ringkasan bukti
Analysis of the domain rpunic.top shows that it was registered on November 24, 2025 through NiceNIC International Group Co., Limited and is delegated to the Cloudflare nameservers harlan.ns.cloudflare.com and lisa.ns.cloudflare.com. The domain resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No TLS certificate is presented, and an HTTP request returns the default page title "Welcome to nginx!", indicating that the site is serving a bare nginx instance rather than a customized phishing page at the time of observation.
The domain has been listed on a single public blocklist and is actively blocked by the PhishDestroy service, confirming that security operators have identified it as malicious. VirusTotal scans have recorded four detections out of ninety‑five submitted scanners, providing additional vendor corroboration of its malicious nature. As of the report date, July 24, 2026, the domain status is reported as offline, suggesting that the operator has taken the site down or is rotating infrastructure.
Uncertainty remains regarding the specific credential collection techniques employed, the target brand or service, and whether the domain will be reactivated on a different host. Defenders should continue to block rpunic.top at DNS and proxy layers, monitor the associated IP range for new domains pointing to the same Cloudflare edge, and consider adding the domain to internal deny lists. Ongoing vigilance is advised because the use of Cloudflare's shared infrastructure can facilitate rapid redeployment of similar phishing sites under new domain names.
Data Coverage
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 12/08/2026
Linimasa deteksi
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive