punchtoken[.]digital
Проверка домена punchtoken.digital на фишинг и безопасность
punchtoken.digital — Контент недоступен (HTTP 502). Тип мошенничества: Crypto Scam. Сводка доказательств: VirusTotal 2/94 (Gridinsoft, SOCRadar); Spamhaus DBL_MALWARE; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Регистратор: PDR.
Подробный анализ PhishDestroy AI ниже оставлен на английском, чтобы сохранить исходную криминалистическую запись.
Evidence Analysis
The domain punchtoken.digital was registered on March 05, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to the IP address 188.114.97.3, which is hosted by Cloudflare (AS13335) in the United States. A Let's Encrypt certificate (CN=E8) is present, and the authoritative nameservers are maya.ns.cloudflare.com and amos.ns.cloudflare.com. HTTP requests to the site return a generic page title of "Just a moment..."; no additional content has been captured because the service has been taken offline.
Threat intelligence classifies the site as a crypto‑related scam, and the domain appears on three external security blocklists. Two of ninety‑four VirusTotal scanners flagged the domain as malicious, and it is actively blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the low reputation.
The combination of Cloudflare hosting, a recent registration, a low trust score, and corroborating blocklist entries indicates a purpose‑built phishing infrastructure targeting cryptocurrency users. Defenders should add punchtoken.digital to domain deny lists, enforce outbound filtering for the associated IP 188.114.97.3, and monitor Cloudflare‑owned ranges for similar recent registrations. Continuous re‑evaluation is recommended in case the site is re‑hosted or the certificate is renewed, as the current offline status does not preclude future activation.
Охват данных12 recorded checks
Процесс реагирования на угрозы
Статус в публичных блок-листах
Сохранённый снимок
Аналитика доменов
Технические сведенияDNS, SAN в протоколе SSL, временные метки
ICANN OVERSIGHT
Аккредитация и контекст RAA
Аккредитация и контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Криминалистическая аналитика
Анализ VirusTotal
Архивные доказательства
Доказательства и внешние отчетыIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.