fun-referal-1jolxind[.]lol
“PIPPIN | Airdrop”
fun-referal-1jolxind.lol — 콘텐츠를 사용할 수 없음. 사기 유형: Crypto Scam. 증거 요약: VirusTotal 2/93 (Gridinsoft, SOCRadar); PhishDestroy score 56/100. 등록기관: PDR.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
The domain fun-referal-1jolxind.lol was registered on December 31, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently taken offline. DNS resolution points to IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The domain is served by the Cloudflare name servers barbara.ns.cloudflare.com and lee.ns.cloudflare.com. No TLS certificate was observed, indicating that the site was delivered over plain HTTP.
The page title returned by the server is "PIPPIN | Airdrop," matching the known crypto‑airdrop scam kit. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high likelihood of malicious intent. The domain appears on a single security blocklist and has been flagged by PhishDestroy. Threat intelligence sources show limited but consistent detection: AlienVault OTX lists the domain in one pulse, and VirusTotal reports that 2 of 93 scanning engines flagged the site.
These detections corroborate the classification of the site as a crypto‑related phishing operation. Uncertainty remains regarding the full scope of the campaign, such as the number of victim URLs or any associated command‑and‑control infrastructure, because no additional artifacts beyond the page title and kit attribution have been disclosed. Defenders should block the domain at network perimeter and DNS layers, monitor for any outbound connections to the Cloudflare IP, and add the domain to internal threat intelligence feeds. Continuous re‑scanning of the domain, especially if it reappears, is recommended to capture any changes in payload or hosting configuration.
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
포렌식 인텔리전스
VirusTotal 분석
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.