trcsw[.]tw
Análisis de phishing y seguridad de trcsw.tw
“澳门威尼斯人”
trcsw.tw — Encubierto · accesible (HTTP 302). Tipo de estafa: Brand Impersonation. Resumen de las pruebas: VT 5/93 (alphaMountain.ai, Gridinsoft, Seclookup, SOCRadar, Sophos); URLQuery 2 alerts; URLScan no malicious verdict; GSB no flag; BL 0; cloaking observed; PD 93/100. Registrador: Dynadot.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
PhishDestroy first observed trcsw.tw on Feb 11, 2026. The captured page title is “澳门威尼斯人”. Stored page analysis classifies the content as brand impersonation. Current evidence score: 93/100 (critical).
Positive findings are stored from 3 sources: VirusTotal, DNS security resolvers, and URLQuery. VirusTotal recorded 5 detections among 93 engines: alphaMountain.ai, Gridinsoft, Seclookup, SOCRadar, Sophos on Jul 10, 2026 at 15:08 UTC. DNS security checks returned 3 blocking results across 15 tested policies: Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. URLQuery recorded 2 threat-system alerts on Feb 11, 2026 at 07:00 UTC. Non-positive and contextual checks: The external blocklist snapshot contained no matches on Aug 8, 2026 at 02:20 UTC. Google Safe Browsing returned no flag on Mar 2, 2026 at 20:28 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:54 UTC.
Cloaking was recorded with HTTP 302 on Aug 7, 2026 at 22:26 UTC. The cloaking probe recorded redirect split conditional delivery at 3/100 on Aug 7, 2026 at 22:26 UTC: redirect: raw=redirect_302; http=302; via=https_proxy; location=https://rlai29zy.cqbast.vip?cid=3732604; server=nginx. Registration records for the domain list Dynadot LLC as the registrar. At collection time, the hostname resolved to 37.221.66.125 on AS48753 (AVA HOST SRL). The recorded endpoint location is Chisinau, MD. The stored server header is AliyunOSS. DOM analysis on Jul 9, 2026 at 02:22 UTC returned 93/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. TLS metadata lists R13 as the certificate issuer with validity through May 3, 2026; checked Mar 15, 2026 at 05:41 UTC.
The content indicators and 3 positive source findings support the current brand impersonation classification.
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | 6nr78cxm.flrhyq.vip |
malicious | Sinkholed |
| DigiCert UltraDNS | trcsw.tw |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Tecnologías · 2 identified
Progressive JavaScript framework for building user interfaces.
Análisis de VirusTotal
Evidencias archivadas
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of trcsw.tw · checked Mar 2, 2026
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.