MALICIOUS — HIGH
shardstrade.io Fake Ethereum NFT Platform Alert
shardstrade[.]
This domain, shardstrade.io, is identified as a brand impersonation threat targeting Ethereum, a prominent blockchain platform.
- VirusTotal
- 1/93
- Blocklists
- No stored match
- 가용성
- 콘텐츠를 사용할 수 없음 · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
shardstrade.io — 콘텐츠를 사용할 수 없음 (HTTP 502). 브랜드 사칭: Ethereum; 사기 유형: Wallet/seed Phishing. 증거 요약: VirusTotal 1/93 (SOCRadar); PhishDestroy score 55/100. 등록기관: PDR.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Evidence Analysis
This domain, shardstrade.io, is identified as a brand impersonation threat targeting Ethereum, a prominent blockchain platform. Analysis indicates the site masqueraded as an NFT trading platform, likely designed to deceive users into connecting wallets or disclosing sensitive credentials under false pretenses. The domain exhibits characteristics consistent with crypto-focused fraud, including the use of blockchain-related terminology and visual elements mimicking legitimate Ethereum services. No direct evidence of a crypto drainer kit was observed, but the infrastructure aligns with known impersonation tactics used to facilitate unauthorized transactions or credential harvesting. Infrastructure analysis reveals the domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on November 21, 2025, and resolved to the IP address 172.67.130.57. Detection metrics show minimal initial coverage, with only 1 of 95 security vendors flagging the domain on VirusTotal. Despite this, the domain appears on three security blocklists and is actively blocked by wallet protection mechanisms and anti-phishing frameworks. The Gridinsoft trust score of 0/100 further corroborates its malicious classification. The page title, 'NFT Trading Platform,' reinforces the impersonation theme, directly targeting users engaged in digital asset trading. As of the latest assessment, shardstrade.io has been taken offline, reducing immediate exposure to potential victims. However, the domain's recent registration and prior hosting on a content delivery network suggest the infrastructure may be repurposed or reactivated. Users who interacted with the domain are advised to audit connected wallets for unauthorized transactions and revoke any suspicious permissions. Organizations should monitor for similar domains registered under the same registrar or resolving to the identified IP, as these may indicate ongoing or evolving campaigns. The elevated risk level persists due to the domain's association with high-value targets and the potential for rapid redeployment.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
데이터 적용 범위12 recorded checks
네트워크 보안 인텔리전스
위협 대응 Pipeline
공개 차단 목록 상태
VirusTotal 분석
증거 및 외부 보고서Independent lookups and source reports
PD-20260103-B607B8 Recipient: abuse@publicdomainregistry.com Victim safety and official reportingImmediate actions and verified reporting channels
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.