punchtokensol[.]net

The domain punchtokensol.net was registered on February 27, 2026 through NiceNIC International Group Co., Limited. DNS resolution points to 104.21.32.228, an address owned by AS13335 Cloudflare, Inc. in the United States. The site presented the page title “Even geduld…”, and its classification in the intelligence feed is a crypto‑scam, consistent with the label “generic phishing” used for the campaign. The domain appears on three public blocklists and is specifically listed by PhishDestroy, MetaMask, and SEAL, indicating that security‑focused services have taken active mitigation steps.

VirusTotal analysis recorded a single positive detection out of 93 scanned vendors, confirming at least one security product flagged the domain. No SSL certificate was observed, and current HTTP probing returns an offline status, suggesting the infrastructure has been taken down or is otherwise inaccessible at the time of reporting. The risk rating assigned is elevated, reflecting the potential impact of crypto‑related fraud.

Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑registration attempts, and consider adding the IP address to broader Cloudflare‑origin blocklists. Because the site is offline, active investigation of the payload is limited; however, the presence on multiple blocklists and the single VirusTotal positive provide reasonable confidence that the domain was used for malicious activity. Ongoing vigilance is advised, particularly for users of cryptocurrency wallets that may have been targeted by the underlying campaign.