mainnettdappfix[.]vercel[.]app
“Wallet Rectify - Rectification, Synchronization, and Validation”
Riepilogo delle prove
Analysis of the domain mainnettdappfix.vercel.app indicates it was actively used in an investment scam campaign targeting cryptocurrency wallet users. The domain, registered on February 21, 2026, through Tucows Domains Inc., resolved to the IP address 64.29.17.3, hosted under Amazon.com, Inc. (AS16509) in the United States. The page title, 'Wallet Rectify - Rectification, Synchronization, and Validation,' suggests an attempt to deceive users into believing the site offers legitimate wallet recovery or synchronization services, a common tactic in cryptocurrency-related fraud. As of July 22, 2026, the domain has been taken offline, returning an HTTP 451 status, which typically indicates content unavailable for legal reasons. Prior to its removal, the domain appeared on five security blocklists and was actively blocked by multiple security vendors, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura.
The SSL certificate, issued by Google Trust Services (WR1), does not mitigate the domain's malicious classification, as phishing sites frequently employ valid certificates to appear legitimate. Detection metrics from VirusTotal, where five out of ninety-three security vendors flagged the domain, further corroborate its malicious nature. The domain was hosted on Vercel, a platform often abused for rapid deployment of phishing infrastructure due to its ease of use and free tier. The presence of HTTP Strict Transport Security (HSTS) headers indicates an attempt to reinforce the illusion of security, though this does not offset the domain's fraudulent intent.
Defenders should treat this domain as part of a broader pattern of investment scams leveraging Vercel-hosted subdomains. Network-level blocking of the resolved IP (64.29.17.3) and monitoring for similar subdomains under vercel.app are recommended.
Data Coverage
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 12/08/2026
6 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
-
Stato del dominio
Raggiungibile → Non raggiungibile
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
Analisi di VirusTotal
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo