Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is trustandsafety@support.aws.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
trojanonsolana[.]com
“Trojan On Solana | The Leading Telegram Trading Bot”
trojanonsolana.com — असत्यापित. ब्रांड प्रतिरूपण: Solana; घोटाले का प्रकार: Crypto Scam. साक्ष्य सारांश: VirusTotal 2/91 (CRDF, Gridinsoft); PhishDestroy score 71/100. रजिस्ट्रार: Amazon.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
The domain trojanonsolana.com was registered on February 21, 2026 through Amazon Registrar, Inc. and currently resolves to the IP address 188.114.96.3, which is hosted by Cloudflare (AS13335) in the United States. The site presents the page title "Trojan On Solana | The Leading Telegram Trading Bot," clearly indicating a crypto‑related scam that purports to target Solana users. Technical fingerprints show the use of Framer Sites, React, HSTS, Google Analytics, Cloudflare Browser Insights, and HTTP/3, all delivered over a TLS certificate issued by Google Trust Services under the WE1 root. An HTTP 200 response is returned for the root URL, and the MX record points to smtp.google.com, suggesting an attempt to lend legitimacy to outbound email.
VirusTotal analysis records a single positive detection out of 93 scanning engines, and the domain appears on the PhishDestroy blocklist, confirming external security community awareness. The nameservers annabel.ns.cloudflare.com and chance.ns.cloudflare.com further tie the infrastructure to Cloudflare’s DNS service. While the evidence confirms a high‑risk crypto impersonation campaign, visibility into the exact payload or user‑interaction flow remains limited because the site has not been publicly captured in detail.
Defenders should block DNS resolution for trojanonsolana.com, add the IP 188.114.96.3 to network deny lists, and monitor for any outbound connections that reference the identified Cloudflare nameservers. Email security solutions should enforce strict sender verification for any messages claiming to originate from smtp.google.com that reference this domain. Continuous threat‑intel feeds should be consulted for any emerging indicators, and incident response teams should be prepared to investigate potential credential or wallet compromise reports that reference Solana‑related phishing attempts.
सुरक्षा संकेत
नेटवर्क सुरक्षा इंटेलिजेंस
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 7 identified
JavaScript library for building user interfaces with component-based architecture.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web analytics service tracking website traffic and user behavior.
marketingplatform.google.comPerformance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
वायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of trojanonsolana.com · checked Mar 2, 2026
साक्ष्य और बाहरी रिपोर्टें
“Whilst playing around on Pump.fun, a user messaged me linking their Telegram username @whiskywhale55. They introduced an official Solana trading bot @solana_trojanbot, which is fully functional and can be viewed as 'mainbot' here: https://trojanonsolana.com/links. The interface required me to import a wallet using a private key, and I entered mine, mistakenly thinking only the seed phrase needed to be kept secret. My account was drained a week after making a deposit to my linked Pump.fun account”
PD-20260204-C2AEBE Recipient: trustandsafety@support.aws.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।