chillnunu[.]org

Analysis of chillnunu.org, observed on July 24, 2026, shows a domain created on September 07, 2025 and registered through Web Commerce Communications Limited dba WebNic.cc. The site resolves to 104.21.96.1, an address allocated to Cloudflare, Inc. (AS13335) and located in the United States. The TLS certificate presented is the Cloudflare TLS Issuing ECC CA 1, indicating standard Cloudflare SSL termination. The page title returned from the live capture reads "nunu | Airdrop," and the domain is associated with an "Airdrop Scam" phishing kit, classified as a crypto scam that impersonates the Solana brand.

VirusTotal analysis recorded a single positive detection out of 93 security vendors, and the domain appears on one public security blocklist. Gridinsoft assigned a trust score of 0 out of 100, and the domain has been blocked by PhishDestroy. Current monitoring shows the domain is taken offline, but historical evidence suggests it was used to lure victims into a fraudulent airdrop offering related to Solana.

Uncertainty remains regarding the exact content served before takedown, as no visual or form details have been captured. Defenders should continue to block the IP address 104.21.96.1 for any outbound connections to this domain, add chillnunu.org to URL filtering lists, and monitor for any re‑registration or similar Cloudflare‑hosted domains that reference Solana or airdrop terminology. Ongoing threat intelligence feeds should be consulted for any resurgence of the Airdrop Scam kit, and incident response teams should be prepared to educate users about unsolicited Solana‑related airdrop communications.