Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@identitydigital.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
edwinmigration[.]world
edwinmigration.world 网络钓鱼与安全检查
“Trade EDWIN”
edwinmigration.world — 隐形 · 可达 (HTTP 200). 品牌冒充:Solana; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 4/91 (alphaMountain.ai, CRDF, Gridinsoft, SOCRadar); 2 external blocklist matches (MetaMask, SEAL); cloaking observed; PhishDestroy score 93/100. 注册商: OwnRegistrar.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
edwinmigration.world was observed on July 12, 2026 delivering a Solana brand impersonation campaign. The site presents a page titled “Trade EDWIN” and attempts to lure visitors into cryptocurrency transactions that appear to be related to the Solana ecosystem. The activity is classified as high‑risk brand_impersonation and remains active.
The domain was registered on March 02, 2026 through OwnRegistrar, Inc. and is delegated to Cloudflare nameservers steven.ns.cloudflare.com and ligia.ns.cloudflare.com. DNS resolution points to IP 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. in the United States. The site serves a valid Let’s Encrypt certificate (Issuer: E7) and utilizes modern web stacks including Node.js, Vue.js, Nuxt.js, Cloudflare Browser Insights, and HTTP/3.
VirusTotal analysis shows a single security vendor flagging the domain out of 95 scans, indicating some detection capability but not a consensus of maliciousness. The domain appears on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its malicious intent. The combination of Solana brand misuse, a cryptocurrency‑focused landing page, and the presence of a trusted SSL certificate are typical of credential‑harvesting or fund‑diversion schemes targeting crypto users.
Defenders should add edwinmigration.world to deny‑list rules at the DNS and network layers, enforce HTTPS inspection to capture the page content, and monitor for any attempted transactions or credential submissions referencing Solana services. Continuous observation of the associated IP and its Cloudflare‑proxied infrastructure is advised, as the attacker may shift to alternative IPs while retaining the same domain registration.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
所用技术 · 6 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
Progressive JavaScript framework for building user interfaces.
Hybrid Vue framework for server-side rendering and static sites.
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of edwinmigration.world · checked Mar 3, 2026
证据与外部报告
BKF-20260704-32 Recipient: abuse@identitydigital.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。