Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@ovh.net.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
trustwallet-web-j6ad3[.]daftpage[.]com
“Trust Wallet | Your Trusted Mobile Crypto Wallet”
trustwallet-web-j6ad3.daftpage.com — Non verificato. Simulazione del marchio: Trust Wallet; Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 12/91 (ChainPatrol, Chong Lua Dao, CyRadar, ESET, Forcepoint ThreatSeeker); URLQuery 2 alerts; PhishDestroy score 86/100. Registrar: OVH sas.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Analysis of the domain trustwallet-web-j6ad3.daftpage.com indicates an active brand impersonation campaign targeting Trust Wallet users, classified as a high-risk crypto scam. The domain was registered on February 21, 2026, through OVH sas and currently resolves to the IP address 216.150.16.1, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The site employs a Let's Encrypt SSL certificate (R13) and returns an HTTP 308 status code, suggesting a redirect mechanism, though the final destination remains unconfirmed in this report. Detection data reveals that 15 of 95 security vendors on VirusTotal flag this domain as malicious, while PhishDestroy has explicitly blocked it.
The domain appears on at least one security blocklist, and Gridinsoft assigns it a trust score of 0/100, reinforcing its high-risk classification. Nameservers ns1.vercel-dns.com and ns2.vercel-dns.com indicate the use of Vercel's hosting platform, which is further supported by the detection of Next.js and React technologies. Additional tracking and engagement tools, including Google Analytics and Crisp Live Chat, are present, which are commonly leveraged in phishing campaigns to monitor victim interactions and enhance social engineering tactics. The page title, 'Trust Wallet | Your Trusted Mobile Crypto Wallet,' directly impersonates the legitimate Trust Wallet brand, aligning with the reported scam type of crypto fraud.
While the exact content and functionality of the site have not been analyzed, the combination of brand impersonation, hosting on a major cloud provider, and detection by multiple security vendors confirms its malicious intent. Defenders are advised to block the domain at the DNS or network level, monitor for related subdomains or IP associations, and alert users to avoid interaction with any communications or advertisements linking to this domain.
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Registration: daftpage.com
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain daftpage.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 9 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
Cloud platform for frontend deployment, optimized for Next.js.
JavaScript library for building user interfaces with component-based architecture.
React framework for production with hybrid static and server rendering.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web analytics service tracking website traffic and user behavior.
marketingplatform.google.comModule bundler for modern JavaScript applications.
Analisi di VirusTotal
Prove archiviate
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of trustwallet-web-j6ad3.daftpage.com · checked Mar 2, 2026
Dati e relazioni esterne
PD-20260125-0B6E0F Recipient: abuse@ovh.net Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo