claim-kelpdao[.]co
“Nur einen Moment…”
Riepilogo delle prove
Analysis of claim-kelpdao.co shows that the domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and created on 25 October 2024. The authoritative nameservers are mckenzie.ns.cloudflare.com and trace.ns.cloudflare.com, directing the domain to the Cloudflare‑owned address 188.114.96.3, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. No SSL certificate is presented, indicating that the site does not offer HTTPS encryption. The only observable page element is the title “Nur einen Moment…”, which provides no indication of legitimate content. The domain is flagged as a crypto‑scam and explicitly listed as impersonating the brand “kelp”.
It has been added to a single security blocklist and is currently blocked by PhishDestroy. A VirusTotal scan involving 95 vendors returned no detections, but the absence of alerts does not constitute a safety guarantee. The domain’s status is reported as offline at the time of assessment. While the infrastructure points to a typical Cloudflare‑fronted malicious hosting pattern, the lack of a TLS certificate and the presence of a generic title suggest a placeholder or redirect page commonly used in brand‑impersonation campaigns.
Uncertainty remains regarding the exact payload or phishing pages that may have been served before the takedown, as no additional content hashes, URL paths, or phishing kit identifiers have been disclosed. Defenders should continue to enforce blocklist rules for claim‑kelpdao.co, monitor any future DNS changes, and consider adding the domain to internal watchlists. Network sensors should flag any outbound connections to 188.114.96.3 from user devices, and email filters should treat messages referencing the “kelp” brand with heightened scrutiny. Ongoing observation of Cloudflare‑associated IP ranges for similar newly registered domains is recommended to catch emerging impersonation attempts.
Data Coverage
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 13/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
Informazioni forensi
Analisi di VirusTotal
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo