tokendistributions[.]cc
tokendistributions.cc — 未验证. 品牌冒充:MetaMask; 诈骗类型:Impersonation. 证据摘要: VirusTotal 5/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 95/100. 注册商: Global Domain Group.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Analysis indicates that the domain tokendistributions.cc was registered on June 06, 2026 through the registrar Global Domain Group LLC. The domain currently resolves to the IPv4 address 188.114.96.3, an address that is part of a hosting range frequently observed in malicious campaigns and that does not resolve to any known corporate or content‑delivery network. VirusTotal data shows that five of ninety‑one scanning engines have flagged the domain as malicious, providing a modest but notable detection confidence. The domain appears on three independent security blocklists and is explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services, all of which specialize in phishing and crypto‑related threats.
No SSL certificate details, HTTP status codes, or page‑title information have been published, so the exact payload or visual presentation of the site cannot be confirmed at this time. Likewise, there are no public entries in Safe Browsing or OTX for this domain, leaving the specific phishing kit, target brand, or lure technique undetermined. The combination of recent registration, a single‑purpose IP host, multiple vendor detections, and active blocklist listings leads to an elevated risk assessment for the domain.
Defensive recommendations include adding tokendistributions.cc to network‑level deny lists, configuring DNS sinkholing to intercept resolution attempts, monitoring outbound traffic to 188.114.96.3 for anomalous connections, and periodically re‑scanning the domain as additional telemetry becomes available. Continued vigilance is advised because the threat actor may activate additional infrastructure or modify the site content without notice.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
域名情报
技术细节DNS、SSL SAN、时间戳
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。