samuraiwarlords[.]xyz
“Samurai Warlords $VALOR Airdrop”
samuraiwarlords.xyz — Errore del server (HTTP 502). Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 12/93 (alphaMountain.ai, BitDefender, CRDF, CyRadar, Forcepoint ThreatSeeker); URLQuery 1 alert; Spamhaus DBL_PHISH; PhishDestroy score 90/100. Registrar: NiceNIC.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
samuraiwarlords.xyz was observed hosting a crypto‑airdrop phishing page titled “Samurai Warlords $VALOR Airdrop”. The site was created on 21 February 2026 and is currently taken offline. TLS termination is provided by Google Trust Services under the WE1 certificate, indicating a legitimate‑looking HTTPS badge. The hosting stack consists of Hostinger front‑end services behind Cloudflare’s edge network, with HTTP/3 enabled and authoritative nameservers earl.ns.cloudflare.com and laura.ns.cloudflare.com.
DNS resolution points to 104.21.48.71, an address owned by AS13335 Cloudflare, Inc. in the United States. The domain was registered through NiceNIC International Group Co., Limited. Analysis attributes the page to an “Airdrop Scam” kit, classified as a crypto‑scam, and 12 of 93 VirusTotal scanners flagged the domain as malicious. It is listed on one external blocklist and has been blocked by the PhishDestroy feed.
Evidence suggests the operator leveraged a popular gaming brand (“Samurai Warlords”) to lure victims into a fraudulent token airdrop, although no further content details are available. Defenders should add samuraiwarlords.xyz to URL filtering and DNS block policies, monitor for any resurrection attempts, and correlate inbound email or network traffic that targets the same IP range or Cloudflare edge nodes. Additional hardening includes enforcing strict TLS inspection for Google Trust Services certificates that do not match known corporate assets, and scanning for the “Airdrop Scam” kit signatures in endpoint telemetry. Continuous threat‑intel watching of the registrar NiceNIC and Cloudflare‑associated IP blocks is advised to detect potential re‑use of the infrastructure.
Informazioni sulla sicurezza di rete Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | samuraiwarlords.xyz |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-14 03:27:12 UTC
Tecnologie · 3 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisi di VirusTotal
Prove archiviate
Dati e relazioni esterne
PD-20260214-32A3CE Recipient: abuse@nicenic.net Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo