MALICIOUS — CRITICAL
Verifica phishing e sicurezza per walletpay.icu
walletpay[.]
PhishDestroy identifies walletpay.icu as a high-risk crypto-draining domain designed to trick users into unknowingly transferring cryptocurrency to threat actor wallets.
- VirusTotal
- 11/91
- Blocklists
- No stored match
- Disponibilità
- Contenuto non disponibile · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
walletpay.icu — Contenuto non disponibile (HTTP 502). Simulazione del marchio: Binance; Tipo di truffa: Brand Impersonation. Riepilogo delle prove: VirusTotal 11/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, Dr.Web); URLQuery 1 alert; PhishDestroy score 89/100. Registrar: NiceNIC.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
PhishDestroy identifies walletpay.icu as a high-risk crypto-draining domain designed to trick users into unknowingly transferring cryptocurrency to threat actor wallets. Upon visiting, the site may display fake wallet interfaces or transaction confirmations to deceive victims into approving fraudulent transfers. This threat is particularly dangerous because it operates silently in the background, leveraging fake SSL certificates and deceptive domain names to appear legitimate. Users who authorize transactions may only realize the fraud after discovering unauthorized crypto withdrawals from their wallets, often with irreversible losses due to blockchain transaction finality.
This domain was flagged due to its active crypto-drainer operations and suspicious infrastructure. It was registered on April 19, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often abused by malicious actors for short-lived domains. The domain resolves to IP address 104.21.16.171 and currently shows 0 detections out of 95 scans on VirusTotal, indicating it evades immediate detection by antivirus engines. Its Let's Encrypt SSL certificate adds to its deceptive appearance, mimicking legitimate services to gain user trust.
If you visited walletpay.icu, immediately revoke any wallet connection permissions it may have obtained. Check your wallet’s connected apps and dApps, and disconnect any unknown or suspicious integrations. Verify the site’s authenticity using PhishDestroy’s verification tools before entering any personal or financial information. Report the domain to your wallet provider and local cybercrime units, including transaction hashes and wallet addresses involved in any unauthorized transfers. Stay vigilant by double-checking URLs, using hardware wallets for sensitive operations, and installing crypto-specific security extensions that detect drainer scripts.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | walletpay.icu |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ZONA SHORTDOT · PROVE PUBBLICHE
.icu
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-08 04:31:09 UTC
Tecnologie · 3 identified
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confidenza al 100%Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of walletpay.icu · checked Apr 23, 2026
Dati e relazioni esterneIndependent lookups and source reports
PD-20260423-448750 Recipient: abuse@nicenic.net, abuse@gen.xyz Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.