# tripscan-original.ru — SUSPICIOUS

> tripscan-original.ru is a crypto drainer posing as a travel site. Flagged by 0 of 95 VirusTotal vendors as of March 27, 2026. Avoid this domain immediately.

## Summary
tripscan-original.ru domain was flagged on March 27, 2026, for operating as a crypto drainer impersonating a travel booking service. The domain remains under investigation with an active status, indicating ongoing malicious activity targeting unsuspecting users through fraudulent reservation platforms.

This domain triggered no detections on VirusTotal as of the investigation timestamp, with 0 out of 95 security vendors flagging it. It is registered through REGRU-RU, resolves to IP address 185.130.47.48, and was created on March 27, 2026. No blocklist entries or trust score data are currently available for this newly registered domain.

The threat analysis confirms active malicious activity associated with tripscan-original.ru. Users are strongly advised to avoid interacting with this domain or any linked payment portals. Security teams should implement network-level blocks for the IP address 185.130.47.48 and monitor for similar domains mimicking travel services. Immediate domain takedown and incident response measures are recommended to mitigate risk.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-27 19:16:29
- Registrar: REGRU-RU
- IP: 185.130.47.48

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/tripscan-original.ru
- PhishDestroy: https://phishdestroy.io/domain/tripscan-original.ru/
- LLM endpoint: https://phishdestroy.io/domain/tripscan-original.ru/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/tripscan-original.ru/
Last updated: 2026-04-08