friweb3[.]top

This domain, friweb3.top, is identified as a fraudulent decentralized application (DApp) impersonating a legitimate Ferrari token offering. Analysis indicates the site functions as a crypto drainer, designed to exploit users by prompting wallet connections and executing unauthorized token transfers under the guise of a branded investment opportunity. The page title, 'FRL DApp - Ferrari Token,' suggests targeted impersonation of Ferrari-related cryptocurrency projects, a common tactic to lend credibility to malicious smart contract interactions. Infrastructure analysis reveals the following technical indicators: the domain was registered on January 01, 2026, via Dynadot LLC, a registrar frequently associated with high-risk domains. It resolves to IP address 202.95.17.233 and is flagged by 15 out of 95 security vendors on VirusTotal. The domain appears on a single security blocklist, and its SSL certificate is issued by Let's Encrypt, a neutral but commonly abused certificate authority in phishing campaigns. Technologies detected include Vue.js for frontend interactivity, Nginx as the web server, and HSTS enforcement, which may be leveraged to enhance the appearance of legitimacy. The domain is currently offline, likely due to takedown actions or voluntary suspension by the hosting provider. Despite its inactive status, residual risk persists for users who may have interacted with the site prior to its removal. Historical DNS records and cached versions of the page may still pose a threat if accessed. Users are advised to revoke any wallet permissions granted to the domain, monitor transaction histories for unauthorized activity, and verify the authenticity of any Ferrari-related token projects through official channels. The elevated risk level is maintained due to the domain's recent activity and the irreversible nature of crypto transactions.