megarewardpool[.]xyz
megarewardpool.xyz — Sunucu hatası (HTTP 502). Dolandırıcılık türü: Fake Airdrop. Kanıt özeti: VirusTotal 5/93 (alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, Fortinet, SOCRadar); Spamhaus DBL_PHISH; PhishDestroy score 65/100. Kayıt kuruluşu: NiceNIC.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Analysis of megarewardpool.xyz indicates that the domain was registered on 21 February 2026 through NiceNIC International Group Co., Limited. The site was hosted behind Cloudflare, using the IP address 104.21.81.112 which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. DNS resolution points to the Cloudflare nameservers buck.ns.cloudflare.com and tara.ns.cloudflare.com, and the TLS certificate presented is issued by Google Trust Services under the WE1 profile, confirming a valid HTTPS endpoint. The page title returned during the brief live check was "Just a moment…", and automated fingerprinting identified Cloudflare Browser Insights, HTTP/3, and generic Cloudflare services as the underlying technologies. Threat intelligence classifies the domain as a "Fake Airdrop" scam, a variant of generic phishing that typically lures victims with promises of cryptocurrency rewards.
VirusTotal recorded five detections out of ninety‑three scanners, and the domain appears on a single external blocklist, where it is listed by PhishDestroy. No additional public blocklists or reputation services were observed in the supplied data. The domain’s current status is offline, which limits real‑time observation of malicious payloads or credential‑harvesting forms. Consequently, the exact content and any post‑delivery behavior remain unknown. However, the combination of a recent registration, Cloudflare‑based hosting, a Google‑signed certificate, and the presence on a phishing‑focused blocklist aligns with known infrastructure patterns used for short‑lived phishing campaigns targeting cryptocurrency users.
Defenders should add the domain and its resolved IP address to network‑level deny lists and monitor DNS queries for the associated Cloudflare nameservers. Email gateways should be configured to block messages referencing airdrop incentives that reference the domain or similar patterns.
Ağ Güvenliği İstihbaratı Registrar context
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-15 03:09:57 UTC
Teknolojiler · 3 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal Analizi
Arşivlenmiş Kanıtlar
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of megarewardpool.xyz · checked Apr 11, 2026
Kanıtlar ve Dış Raporlar
PD-20260214-F9C691 Recipient: abuse@nicenic.net Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin