penguineonsol.com — Contenuto non disponibile (HTTP 502). Simulazione del marchio: Coinbase; Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 3/93 (Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); URLQuery 1 alert; 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 74/100. Registrar: Hello Internet.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Facts
PhishDestroy first observed penguineonsol.com on Feb 2, 2026. Stored content metadata identifies Coinbase as the apparent target. The captured page title is “Jupiter | The DeFi Superapp | Jupiter”. Evidence score: 74/100 (critical).
5 independent sources recorded positive findings: VirusTotal, MetaMask, ScamSniffer, SEAL, and URLQuery. VirusTotal recorded 3 detections among 93 engines: Forcepoint ThreatSeeker, Gridinsoft, SOCRadar on Feb 25, 2026 at 00:52 UTC. MetaMask, ScamSniffer, and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 9, 2026 at 10:20 UTC. URLQuery recorded 1 threat-system alert on Feb 2, 2026 at 15:45 UTC.
HTTP 502 was recorded on Aug 9, 2026 at 01:21 UTC; content was unavailable. Registration records for the domain list Hello Internet Corp as the registrar. At collection time, the hostname resolved to 104.21.24.202 on AS13335 (Cloudflare, Inc.). The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | penguineonsol.com |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Dati e relazioni esterneIndependent lookups and source reports
PD-20260202-8FB0EF Recipient: abuse@hello.co Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.