tuco[.]co
“Круглосуточный обмен электронных валют «TUCO»”
tuco.co — No verificado. Resumen de las pruebas: VirusTotal 5/91 (alphaMountain.ai, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, SOCRadar); PhishDestroy score 88/100.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
PhishDestroy first observed tuco.co on Jul 27, 2026. The captured page title is “Круглосуточный обмен электронных валют «TUCO»”. Current evidence score: 88/100 (critical).
One source contains a positive finding: VirusTotal. VirusTotal recorded 5 detections among 91 engines: alphaMountain.ai, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, SOCRadar on Aug 13, 2026 at 06:28 UTC. Non-positive and contextual checks: AlienVault OTX listed 3 community pulse references (not vendor detections) on Aug 13, 2026 at 06:30 UTC. The separate external-blocklist snapshot contained no matches on Aug 30, 2026 at 22:20 UTC. Google Safe Browsing returned no flag on Aug 13, 2026 at 06:29 UTC.
The collector marked the hostname reachable on Aug 30, 2026 at 22:16 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 51.250.68.164 on AS200350 (Yandex.Cloud LLC). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. The evidence archive retains 1 visual capture from Cloudflare Radar. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Oct 15, 2026; checked Aug 11, 2026 at 13:02 UTC.
Stored content provides classification context, but only one source contains a positive finding. The stored fields do not identify an impersonated brand or victim interaction.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
Tecnologías · 8 identified
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.
aws.amazon.com 100 % de confianzaYandex.Metrica is a free web analytics service that tracks and reports website traffic.
metrika.yandex.com 100 % de confianzareCAPTCHA is a free service from Google that helps protect websites from spam and abuse.
www.google.com 100 % de confianzaJivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.
www.jivosite.com 100 % de confianzaHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100 % de confianzaCloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100 % de confianzaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100 % de confianzaAmazon Simple Email Service (SES) is an email service that enables developers to send mail from within any application.
aws.amazon.com 100 % de confianzaAnálisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of tuco.co · checked Aug 11, 2026
Datos y informes externos
“This is a coordinated "frozen order" exchange scam operated through a Telegram account named "Flowisland Support." The group poses as a cryptocurrency exchange service. Method of operation: After a victim sends crypto for a swap (SOL to TRX), the operators claim the order is "frozen" due to a fabricated network error — e.g. a "7th validator error" on Solana, or a claimed amount mismatch (5.55 vs 5.56 SOL). No such error exists; this is a pretext. They then demand the victim make a second ident”
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.