Skip to security report
Analytics Dashboard
⚠️
This domain has been flagged as malicious
Security engines reporting a detection: 2. Exercise extreme caution — do not enter credentials or personal information.
Domain security and threat intelligence

walletsign-l6g7v0a4nf[.]edgeone[.]app

“WalletSign: Securely Sign & Verify Multi-Chain Messages with Your Browser Wallet | BTC, ETH, SUI, T…”

Threat verdict High 60/100 evidence score
Availability Content unavailable Content was unavailable in the latest observation
Risk signals
VirusTotal detections: 2/93 URLQuery threat systems: 1 alert Brand impersonation: Sui
Jan 24, 2026 Sui 1 Report Sent
Evidence Summary
HIGH
Ref
85B16D95
Score
60/100

This domain, walletsign-l6g7v0a4nf.edgeone.app, is flagged for brand_impersonation targeting the Sui blockchain platform. Analysis indicates the site mimics legitimate wallet verification services, presenting a page titled 'WalletSign: Securely Sign & Verify Multi-Chain Messages with Your Browser Wallet | BTC, ETH, SUI, TRON.' The intent appears to deceive users into interacting with a fraudulent interface, potentially leading to credential theft or unauthorized transactions. No explicit drainer kit signatures were identified, but the multi-chain messaging angle suggests a broad targeting strategy. Infrastructure analysis reveals the following technical indicators: the domain was registered on February 21, 2026, through MarkMonitor, Inc., and resolves to the IP address 43.152.26.58. VirusTotal reports 2 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by DigiCert, Inc., which, while legitimate, does not mitigate the underlying threat. No Google Safe Browsing (GSB) detections were noted at the time of analysis. As of the latest assessment, the domain has been taken offline, reducing immediate exposure. However, residual risk persists due to the domain's recent creation and the potential for re-deployment under a different infrastructure. Organizations and users are advised to monitor for similar impersonation attempts, particularly those leveraging multi-chain wallet verification themes. Blocklist integration and endpoint protection rules should be updated to include this domain and its associated IP. Vigilance is recommended for any domains mimicking Sui or other blockchain services, especially those registered through high-reputation registrars but exhibiting low detection rates.

VirusTotal
VirusTotal
2 det.
URLQuery
URLQuery
1 threat alert
URLScan
URLScan
Report ↗
TLS Certificate
DigiCert, Inc.
Observed status
Content unavailable
PhishDestroy
DestroyList
Listed
Reports Sent
1
Data coverage VirusTotal 2 / 93 URLQuery 1 threat-system alert PhishStats not checked OTX no community references CF Radar scan completed URLScan capture stored report URLScan verdict Analysis completed DNS blocks 14 checked — no blocks TLS valid certificate, 142d WHOIS not parsed Screenshot 3 captures · 3 sources Redirect chain not probed
Network Security Intelligence
Threat Detection Systems 1 alert
Detection System Indicator Verdict Alert
Quad9 DNS walletsign-l6g7v0a4nf.edgeone.app malicious Sinkholed
Stored URLQuery scan evidence · Jan 25, 2026 04:30 UTC Open source report

Threat Response Pipeline

Discovery
Checks
Reports
Availability
17/17
Sent Report Recorded
Stored sent-report record for registrar MarkMonitor, Inc., hosting provider, 2 abuse contacts
registryescalations@markmonitor.comas139341_abuse@aceville.net
Jan 25, 2026

Public Blocklist Status

Stored Capture

URLScan capture 2 / 3
View Full Size Source Report Wayback Download
Page Title
WalletSign: Securely Sign & Verify Multi-Chain Messages with Your Browser Wallet | BTC, ETH, SUI, TRON
Impersonates
Sui Tron
TLS Certificate
Valid transport encryption · Issued by DigiCert, Inc. · valid for 142 days

Domain Intelligence

Domain
URLScan Verdict Analysis completed score 0 report ↗
Server / ASN edgeone-pages · AS139341 ACE-AS-AP ACE, SG
IP Reputation abuse score 0/100 1 report checked Jun 16, 2026
Registrar (base domain) MarkMonitor US(US)
Abuse contactregistryescalations@markmonitor.com, as139341_abuse@aceville.net
ICANN RegistryOfficial ICANN accredited-registrars →
WHOIS LookupICANN RDAP for edgeone.app →
IP Address 43.152.26.58 DE
GeoDE Frankfurt am Main, DE
NetworkAS139341 · ACE
Reverse IPviewdns.info → rapiddns.io →
Registration (base domain)edgeone.app · Expires May 10, 2026
Time to First Unavailability 33 days
What we count Elapsed time from the first stored abuse report to the first observation that the content was unavailable. This does not establish the cause.
What each report contains Stored outgoing-report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Technical detailsDNS, SSL SANs, timestamps
First DetectedJan 24, 2026
DOM Analysisanalyzed Jul 29, 2026score 0/1002 brand signals
IoC Extractionscanned Aug 2, 20260 wallet · 0 Telegram IoCs
Submitted URLhttps://walletsign-l6g7v0a4nf.edgeone.app/
Nameserversns3.dnsv4.comns4.dnsv4.com
TLS Fingerprint
TLS Observationvalid from Nov 17, 2025scanned Mar 15, 2026
TLS SAN Domainsedgeone.app
Case ID
ICANN OVERSIGHT Registration: edgeone.app

Accreditation and RAA context

Registrar accreditation and DNS abuse obligations

For the registrable domain edgeone.app behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accreditation is a contract, not a safety seal. Verify ICANN fees Read RAA §3.18 PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Accountability draft Nothing is sent automatically.
Report This Domain Submit evidence & help protect others

VirusTotal Analysis

2 / 93 security vendors flagged this domain
View on VT
Last analyzed
Seclookup
Webroot

Archived Evidence

Wayback Machine Snapshot
A historical snapshot is available for evidence review
View Archive
Site Performance Analysis

Google PageSpeed Insights — mobile performance audit of walletsign-l6g7v0a4nf.edgeone.app · checked Jun 27, 2026

100
Good
Performance
FCP
0.81s
First Contentful Paint
LCP
0.81s
Largest Contentful Paint
CLS
0.001
Cumulative Layout Shift
TBT
0ms
Total Blocking Time
SI
1.63s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor

Evidence & External Reports

Security Analysis
URLScan Analyzed VirusTotal 2 det. ChainPatrol URLQuery 1 threat alert SSL Labs Stored TLS valid CF Radar Open report WOT ScamAdviser Blacklist Checker URLVoid Sucuri SiteCheck MDN Observatory
Submitted Evidence Snapshot
Sent: Ledger records: 1 Case ID: PD-20260125-B3EC2B Recipient: registryescalations@markmonitor.com
Page title stored with report: WalletSign: Securely Sign & Verify Multi-Chain Messages with Your Browser Wallet | BTC, ETH, SUI, TRON
URLScan evidence VirusTotal evidence URLQuery evidence Screenshot 35.8 KB
OSINT & Intelligence
Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox Hudson Rock Sign-in search IntelX crt.sh Certs WHOIS Wayback Archived
DNS & Network
nslookup.io DNS bgp.tools ASN/Route
SEO & Domain
SpyFu Moz DA/PA Ahrefs Backlinks Deep Analysis

Were You Affected by This Site?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.

Europol
Find the official reporting channel for your EU country
National police directory
PhishDestroy listing review Not a law-enforcement report
Domain Appeal
Request a review if you own this domain and believe the listing is incorrect
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →

Report to Your Local Authorities

Select your country to get official cybercrime contacts, or create a complaint draft →.

97-country directory
Template-based draft • optional AI wording assistance requires separate consent Review and submit it yourself

Check Any Domain

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Scan Now

Report Phishing

Submit suspicious domains to our threat database — protect the community

Report

Live Threat Feed

Recent phishing reports and observed availability changes

Monitor

Stay Informed, Stay Safe

Monitor live threats or contest this listing if you believe it's a false positive

Live Threat Feed Appeal This Listing
HTML · IFRAME

Embed This Report

Share this threat intelligence on your website or blog

embed.html 
<iframe
  src="https://phishdestroy.io/embed/domain/walletsign-l6g7v0a4nf.edgeone.app"
  title="PhishDestroy threat report for walletsign-l6g7v0a4nf.edgeone.app"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

A Very Sincere Thank-You Note

Satirical draft generator

Recipient
Fee context

Satirical draft. Fee figures are estimates; exact attribution to this domain is not claimed.