adilisclown[.]fun

Analysis of the domain adilisclown.fun confirms its classification as an NFT airdrop scam, targeting cryptocurrency users with fraudulent claims of free token distributions. The domain was registered on February 21, 2026, through HOSTINGER operations, UAB, and resolved to the IP address 147.93.73.231, hosted under AS47583 (Hostinger International Limited) in Lithuania. No SSL certificate was detected, increasing the risk of unencrypted data interception. The page title, 'CLAIM NFT AIRDROP,' aligns with known phishing kits designed to deceive users into connecting wallets or submitting sensitive information under false pretenses.

Infrastructure analysis reveals the domain uses nameservers ns1.dns-parking.com and ns2.dns-parking.com, a configuration often associated with low-cost or disposable hosting setups. Detection by security vendors is moderate, with 13 of 93 engines on VirusTotal flagging the domain as malicious. It appears on two security blocklists (PhishDestroy and ScamSniffer) and was included in one AlienVault OTX threat intelligence pulse, indicating prior identification by the security community. The domain is currently offline, though defenders should treat it as a confirmed threat vector until further remediation is verified.

The scam type is explicitly categorized as a crypto scam, with no evidence suggesting targeting of a specific brand beyond the generic NFT airdrop theme. While the exact content of the phishing page remains unanalyzed, the combination of a suggestive page title, absence of SSL, and detection by multiple security tools supports its classification as a deliberate fraud attempt. Defenders are advised to block the domain and its associated IP at the network level, monitor for related infrastructure (e.g., subdomains or newly registered lookalike domains), and alert users to the risks of interacting with unsolicited airdrop promotions.