greenlizard[.]lol
greenlizard.lol için kimlik avı ve güvenlik kontrolü
“Official Lizard Coin Airdrop”
greenlizard.lol — İçerik kullanılamıyor (HTTP 502). Marka kimliğine bürünme: Celer; Dolandırıcılık türü: Wallet/seed Phishing. Kanıt özeti: VirusTotal 21/94 (ADMINUSLabs, alphaMountain.ai, AlphaSOC, BitDefender, Certego); URLQuery 3 alerts; Spamhaus DBL_MALWARE; PhishDestroy score 95/100. Kayıt kuruluşu: PDR.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Kanıt özeti
PhishDestroy first observed greenlizard.lol on Mar 15, 2026. Stored content metadata identifies Celer as the apparent target. The captured page title is “Official Lizard Coin Airdrop”. Evidence score: 95/100 (critical).
3 independent sources recorded positive findings: VirusTotal, Spamhaus DBL, and URLQuery. VirusTotal recorded 21 detections among 94 engines: ADMINUSLabs, alphaMountain.ai, AlphaSOC, BitDefender, Certego, Chong Lua Dao, CRDF, CyRadar on Mar 24, 2026 at 05:22 UTC. Spamhaus DBL: DBL_MALWARE on Jul 14, 2026 at 02:30 UTC. URLQuery recorded 3 threat-system alerts on Mar 15, 2026 at 14:49 UTC.
HTTP 502 was recorded on Aug 9, 2026 at 01:16 UTC; content was unavailable. Registration records for the domain list PDR Ltd. d/b/a PublicDomainRegistry.com as the registrar and Feb 13, 2026 as the creation date. At collection time, the hostname resolved to 178.20.210.166 on AS210006 (ASKZ Shereverov Marat Ahmedovich, KZ). The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery.
Veri kapsamı12 recorded checks
Ağ Güvenliği İstihbaratı
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | greenlizard.lol |
malicious | Sinkholed |
| DigiCert UltraDNS | greenlizard.lol |
malicious | Sinkholed |
| Quad9 DNS | greenlizard.lol |
malicious | Sinkholed |
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Adli İstihbarat
VirusTotal Analizi
Kanıtlar ve Dış RaporlarIndependent lookups and source reports
PD-20260315-84414B Recipient: abuse@publicdomainregistry.com Victim safety and official reportingImmediate actions and verified reporting channels
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.