checktrc[.]info
“RiskScan”
Résumé des preuves
PhishDestroy identifies checktrc.info as a recently activated crypto drainer domain that is currently under investigation by the anti-phishing team. The domain was created on June 17, 2025, and is resolving to IP address 69.10.62.204. No specific brand name was found in connection with this site during the initial assessment, suggesting a targeted generic campaign designed to steal cryptocurrency via malicious transaction approvals. The domain’s fast registration timeline and lack of historical reputation are consistent with attacker behavior patterns used to deploy drainer kits before security layers can respond.
Technical indicators reveal that the domain has not yet been flagged by VirusTotal, showing 0 detections out of 95 scanners as of the latest check. The domain was registered through GoDaddy.com, LLC and secured with a Let's Encrypt SSL certificate, adding a false veneer of legitimacy. The creation date—June 17, 2025—places this domain among newly emergent threats, reducing the chance of prior blocklisting. As of now, this site remains unlisted on major blocklists such as Google Safe Browsing (GSB), further delaying detection. These factors indicate a low-profile, high-risk deployment aimed at bypassing early-stage filtering mechanisms.
The current status of checktrc.info is active and under active review by PhishDestroy’s analysts. No definitive drainer kit payload has been confirmed, but the domain’s configuration and behavior strongly suggest deployment of a crypto drainer. Users are advised to avoid this domain entirely and to verify any crypto-related website using PhishDestroy’s real-time threat lookup tool. The remaining risk is classified as 'under investigation,' meaning the threat may escalate as additional intelligence is gathered. Immediate action is recommended for any users who may have interacted with this domain, including revoking unauthorized transaction approvals and scanning connected wallets for signs of compromise.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260409-EC43D2- Titre de la page capturée
- RiskScan
- Artefact PDF
- Preuve PDF
Fondement juridique
Texte intégral des preuves
Policy Violations: Universal TOS + Abuse Policy prohibit fraudulent, abusive, malicious, phishing and illegal activity; grants right to terminate or suspend services
Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
Data Coverage
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | checktrc.info/static/js/main.b369a1ec.js |
malware | Detects file containing Telegram Bot API |
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 11/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
État du domaine
Accessible → Inaccessible
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of checktrc.info · checked Apr 9, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif