VirusTotal
2 / 92
SignalerInterpretation & limits
Engine detections from this stored analysis. Vendors and collection times may differ from other sources.
Domain security report
trustwalletinvest.site
“Trust Wallet Invest | Register”
Verdict de menace
Assessment sources
Assessment based on the stored source evidence below. Review sources →
Disponibilité
Non vérifié
L'accessibilité actuelle n'est pas vérifiée
Observé · HTTP probe
Signaux de risque
Détections VirusTotal : 2/92
Spamhaus DBL: DBL_PHISH
Correspondances de la liste de blocage stockée : 2
Automated brand label: Trust Wallet
Domaine jeune : 2 jours
- Bureau d’enregistrement
- GMO Internet Group
- Resolved IP
- 188.114.97.3
- Registered
- 15/10/2026
Stored captures
3 sourcesThe capture source is temporarily unavailable.
In this reportGet help
Résumé du rapport
trustwalletinvest.site — Non vérifié. Usurpation de l'identité de la marque : Trust Wallet; Type d'arnaque : Impersonation. Résumé des preuves: VirusTotal 2/92 (alphaMountain.ai, SOCRadar); URLQuery 2 det.; URLScan capture; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 98/100. Bureau d’enregistrement: GMO Internet Group.
The evidence summary below uses retained observations. Each source keeps its own collection date.
Additional indicators at a glance
Spamhaus DBL
DBL_PHISH
VirusTotal
2 det.
URLQuery
2 det.
OTX references
URLScan
Certificat TLS
Within stored validity dates
Let's Encrypt / YE2 · Hostname coverage not recordedÂge
2d Brand New!
DestroyList
Répertorié
Reports Sent
1
Source evidence
8 · sourcesThese are dated observations, not a live safety check. No flag, a stored capture, or a completed analysis does not establish that a site is safe.
URLQuery
2 det.
Observation time not recorded
Signaler Interpretation & limits
Alerts refer to the preserved scan. They do not describe the current state of the site.
Public blocklists
2 external matches
DétailsInterpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
Spamhaus DBL
DBL_PHISH
Interpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
OTX
4 community references
SignalerInterpretation & limits
Community publication references, not a vendor verdict or evidence of a common operator.
CF Radar
provider verdict: suspicious
Observation time not recorded
Signaler Interpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
URLScan capture
rapport stocké
View stored capture ↗ SignalerInterpretation & limits
A preserved page image documents what the collector received; a capture is not a safety verdict.
Google Safe Browsing
Checked; no threat flag recorded
SignalerInterpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
Résumé des preuves
Evidence-based analysis Generated from the observations retained in this report. No stored AI narrative is available for this record. Each source retains its own collection date.
PhishDestroy first observed trustwalletinvest.site on Oct 17, 2026. The hostname explicitly references Trust Wallet; stored content metadata identifies the same apparent target. The captured page title is “Trust Wallet Invest | Register”. Stored page analysis classifies the content as impersonation. Current evidence score: 98/100 (critical).
Positive findings are stored from 5 sources: VirusTotal, MetaMask, SEAL, Spamhaus DBL, and URLQuery. VirusTotal recorded 2 detections among 92 engines: alphaMountain.ai, SOCRadar on Oct 17, 2026 at 19:06 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Oct 17, 2026 at 18:20 UTC. Spamhaus DBL: DBL_PHISH on Oct 17, 2026 at 14:30 UTC. URLQuery recorded 2 detections; no observation timestamp was retained. Additional recorded evidence: AlienVault OTX listed 4 community pulse references (not vendor detections) on Oct 17, 2026 at 19:07 UTC. URLScan captured the page on Oct 17, 2026 at 11:45 UTC.
The collector marked the hostname reachable on Oct 17, 2026 at 11:45 UTC, but did not retain the HTTP response code. Latest classified outcome: unknown; cause probe inconclusive on Oct 17, 2026 at 09:45 UTC. Registration records for the domain list GMO Internet Group, Inc. d/b/a Onamae.com as the registrar and Oct 15, 2026 as the creation date. Registration preceded first observation by 1 day. At collection time, the hostname resolved to 188.114.97.3 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Oct 17, 2026 at 14:20 UTC returned 98/100. The evidence archive retains 3 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt / YE2 as the certificate issuer with validity through Jan 14, 2027; checked Oct 17, 2026 at 13:02 UTC.
The content indicators and 5 positive source findings support the current Trust Wallet-themed impersonation classification.
Data coverage & collection
22 · datasets with records / 9 · not recorded
What this report contains, where it came from, and when it was collected. A retained record can be incomplete; collection status is separate from the threat assessment.
Recorded dataPartial recordUTC
- VirusTotal
- 2 / 92 · engine detections
- URLScan analysis
- Capture retained; no provider verdictCollection time not recorded
- URLQuery
- 2 · recorded detections / alertsCollection time not recorded
- Google Safe Browsing
- Checked; no threat flag recorded
- OTX publications
- 4 · community references
- External blocklists
- 2 · external matches
- Cloudflare Radar
- suspiciousCollection time not recorded
- Spamhaus DBL
- DBL_PHISH
- Domain registration
- GMO Internet Group, Inc. d/b/a Onamae.comCollection time not recorded
- Network & DNS
- 188.114.97.3 · 2 · nameserversCollection time not recorded
- Certificat TLS
- Let's Encrypt / YE2
- Page captures
- 3 · retained captures
- HTML archives
- 1 · retained responses
- Page analysis
- 1 · automated brand labels
- Site configuration files
- robots.txt · sitemap.xml · security.txt
- PageSpeed performance
- 81/100 · mobile performance
- Response records
- 1 · outgoing report records
- Recorded subdomains
- 2 · retained hostnamesCollection time not recorded
- Availability history
- 1 · stored state changes
- Source observation history
- 3 · stored source events
- Lookalike relationships
- 100 · retained relationshipsCollection time not recorded
- IP reputation
- Network-level observations
Not recorded in this report 9
These checks have no retained result. This does not mean they passed or that a scan is running.
- PhishStats
- DNS security filters
- Gridinsoft
- Scamadviser
- Observed indicators
- Detection & evasion
- Signalements communautaires
- Chainabuse records
- Wayback archive
Download the dated observations and supporting metadata.
Blocklist records
2 · external source matches
Statut de la liste de blocage publique
Domain, network & archive
GMO Internet Group, Inc. d/b/a Onamae.com · 188.114.97.3 · DNS, TLS and retained responses
Domain details
Domaine
IP Context
Cloudflare shared edge
origin IP hidden
La réputation Edge-IP n’est pas attribuée à ce domaine.
OTX tags
Bureau d’enregistrement
GMO Internet Group
(JP)
(JP)
EnregistrementCréé 15/10/2026 (2d · Brand New!) — Expires 15/10/2027
Détails techniquesProvenance & timestamps
Première détection17/10/2026
DOM Analysis
Submitted URLhttp://trustwalletinvest.site/
Favicon Hash
ID du dossier
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Une accréditation est un contrat, pas un label de sécurité.
Vérifier les frais de l’ICANN
Lire le RAA §3.18
PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Network & certificates
Stored technical evidenceNetwork & DNS
Shared CDN edge- Resolved IP
- 188.114.97.3
- Network ASN
- AS13335
- Organization
- CloudFlare, Inc.
- Observed location
- Toronto, CA
- Server header
- cloudflare
La réputation Edge-IP n’est pas attribuée à ce domaine.
Serveurs de noms 2
annabel.ns.cloudflare.comearl.ns.cloudflare.com
Mail routing 1 MX record
_dc-mx.a8f69f117bab.trustwalletinvest.sitepriority 0
Location describes the IP network.
Certificat TLS
- Issuer
- Let's Encrypt / YE2
- Valid from
- 2026-10-16 05:24:46
- Valid until
- 2027-01-14 05:24:45
- Hostname coverage
- Hostname coverage not recorded
- Validity
- Within stored validity dates
- Collection time
- 2026-10-17 13:02:05 UTC
- Collection source
- PhishDestroy collector
Certificate fingerprint
871246b4e85f69c89b6a9170ea87b32bc6891c18355b247c45bf056285ddba20Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Latest Classified Outcome 2026-10-17 11:45:14 UTC
Primary outcome
Inconnu
reason: Probe Inconclusive 20% confidence
Attribution
source: Current State Backfill
Evidence layers
Availability: Unreachable
Content: Unknown
DNS: Resolved
Registration: Unknown
Latest HTTP observation
Inconnu Probe Inconclusive 20% 2026-10-17 11:45:14 UTC
RDAP registration
Inconnu
Observed timeline
last reachable: 2026-10-17 11:45:14 UTC
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
Recorded subdomains2
Hostnames retained in the domain record or Certificate Transparency cache. A hostname alone does not establish current availability or malicious activity.
mail.trustwalletinvest.siteDomain recordwww.trustwalletinvest.siteDomain record
The original observation time is not recorded for these hostnames.
Technologies · 8 identified
PHP
Programming languages
SweetAlert2
JavaScript libraries
jsDelivr
CDN
jQuery CDN
CDN
jQuery
JavaScript libraries
Cloudflare Browser Insights
Analytics
RUM
Cloudflare
CDN
HTTP/3
Miscellaneous
Detected via Cloudflare Radar · Wappalyzer engine
Signaler ce domaine
Envoyez des éléments de preuve et contribuez à protéger les autres
Analyse VirusTotal
2 / Les fournisseurs de sécurité 92 ont signalé ce domaine
View on VT
Last analyzed First positive detection Previous stored snapshot: 2 detections
alphaMountain.ai
SOCRadar
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of trustwalletinvest.site · checked Oct 17, 2026
81
Needs Work
Performance
FCP
3.46s
First Contentful Paint
LCP
3.46s
Largest Contentful Paint
CLS
0.001
Cumulative Layout Shift
TBT
0ms
Total Blocking Time
SI
5.21s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Stored Capture Evidence 1 snapshot
Timestamped response metadata retained by the local collection pipeline. Each value below belongs to the displayed archive time.
Archived HTTP response
HTTP 200
Requested URL:
http://trustwalletinvest.site/Trust Wallet Invest | Register
Trust Wallet Invest
Réponse
HTTP 200
HTTP 200
HTML body
23.1 KB
23.1 KB
Compressed
5.4 KB
5.4 KB
Links
5 internal · 0 external
5 internal · 0 external
Detected technologies
jquerycloudflare
Selected response headers
Content-Type: text/html; charset=UTF-8X-Powered-By: PHP/8.3.35Cache-Control: no-cache, privateServer: cloudflareCF-Cache-Status: DYNAMICContent-Encoding: gzip
HSTS: not observed
DNSSEC: not observed
WAF / firewall: observed
Cloaking flag: not observed
Favicon fingerprint:
10cce1303524688aee8514402c5e0b6e144c6b6a9d47b009ad958b5a18119efdOpen Graph title: Trust Wallet Invest
Open Graph description: Trust Wallet Invest
Twitter card:
summary_large_imageSaved response-header values · 15
- alt-svc
h2=":443"; ma=60- Cache-Control
no-cache, private- cf-cache-status
DYNAMIC- CF-RAY
a4befa5dbb67d9da-FRA- Connection
keep-alive- Content-Encoding
gzip- Content-Type
text/html; charset=UTF-8- Date
Sat, 17 Oct 2026 11:31:37 GMT- Nel
{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}- Report-To
{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=pFFoC5x6rF3qxOIKINWfGFzBai4jG25P6SsNevg3Yk%2Bg%2F%2F2dhoxtq0CNTjDqtgT28a0e83PBnNBQh%2BuhFH%2F%2BsLQxOETYp4JxmmppXMOIrvsJJax35UQaUUfe0Pi82QlsYTM- Server
cloudflare- Transfer-Encoding
chunked- Vary
Accept-Encoding- X-Powered-By
PHP/8.3.35- X-turbo-charged-by
LiteSpeed
Values retained by the collector; long values may be shortened during collection.
Crawler & disclosure files
3 · file checks
Site configuration evidence
Stored file checks, including unavailable and invalid responses. Retained contents and paths appear where available.
robots.txt
Reachable (legacy)/robots.txt
A legacy scan recorded a successful response. The file contents were not retained.
Sitemap
Introuvable/sitemap.xml
The scanner received HTTP 404 or 410 for this file.
security.txt
Introuvable/.well-known/security.txt
The scanner received HTTP 404 or 410 for this file.
Registration & observation details1
Availability observations
- Last reachable observation
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Detection & evasion checks
Stored browser and crawler observations
Analyse de la détection et de l'évasion
Vérification du cloaking et de la répartition du trafic
Pas encore numérisé
Aucune différence entre les robots d'indexation et les navigateurs n'a encore été constatée
Enregistrement des observations « crawler contre navigateur » pour cet hôte, ainsi qu'une vérification en temps réel des empreintes numériques pour les systèmes de répartition du trafic de type Keitaro.
- Indicateur de camouflage enregistré
- Pas encore numérisé
- Routage de la capture
Localarchivé le 2026-10-17 11:31:39 UTC
Vérification en direct des empreintes digitales d'TDS
Sept empreintes Keitaro et une comparaison entre navigateur et robot. Une nouvelle analyse démarre uniquement en cliquant sur le bouton.
À la demande
Aucun résultat de vérification enregistré.
Timeline & response
1 · outbound report records
Forensic History & Detection Timeline
ThreatLifecycleTelemetry
This timeline displays historical security and status checkpoints observed by the PhishDestroy automated monitoring network. It records domain lifecycle updates, scanner changes, and threat telemetry over time.
-
VirusTotal Detections Update 2026-10-17 18:06:03 UTCSource: VirusTotal
Event details
VirusTotal scanner detections updated from 1 to 2. Added scanner alerts: alphaMountain.ai. -
VirusTotal Detections Update 2026-10-17 15:32:11 UTCSource: VirusTotal
Event details
VirusTotal scanner detections updated from 0 to 1. Added scanner alerts: SOCRadar. -
Threat First Observed 2026-10-17 11:30:43 UTCSource: PhishDestroy monitoring
Event details
Domain ingestion complete. Initial state is marked as unknown pointing to IP188.114.96.1.
Stored observation history4
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
-
VirusTotal · Detection count
1→2
-
VirusTotal · Detection count
0→1
-
Availability monitor · First collection record
Inconnu
-
Availability monitor · Recorded state
Inconnu
probe_inconclusive
Processus de réponse aux menaces Pipeline
Découverte
Analysis
Notifications
Monitoring
14 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
Menace détectée
trustwalletinvest.site détectés et mis en file d'attente en vue d'une analyse complète
Spamhaus DBL
Spamhaus DBL recorded DBL_PHISH
URLScan.io Capture
Enregistré URLScan report with capture artifacts
Cloudflare Radar Report
A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.
VirusTotal
2/92 recorded on VirusTotal
Détection des listes noires
Trouvé dans 2 blocklists: MetaMask, SEAL
OTX Community References
4 community publication references on AlienVault OTX. References are not vendor verdicts and are excluded from the evidence score.
Brand Impersonation
Impersonation of Trust Wallet
Forensic Evidence Collected
Stored evidence from URLScan.io, URLQuery, stored screenshot
Technical Analysis Recorded
Le rapport contient des résultats de technologie ou d’analyse médico-légale stockés.
VT Detection +1
+1 new detection (1 → 2): alphaMountain.ai
VT Detection +1
+1 new detection (0 → 1): SOCRadar
Sent Report Recorded
Stored outgoing record associated with registrar GMO Internet Group, Inc. d/b/a Onamae.com, 1 abuse contact
onamae@internet.gmo
DestroyList publié
Listed in the public PhishDestroy/DestroyList repository
How we investigate & report
Public scans, evidence and abuse channels
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
01Public scans & evidence collection10 sources and tool groups
urlscan.io
Screenshot · DOM · HTTP
Capture the rendered page, requests and visible infrastructure.
VirusTotal
Multi-engine verdicts
Compare the available engine results and retain the analysis timestamp.
Google Safe Browsing
Transparency Report
Check whether Google currently lists the URL as unsafe.
Cloudflare Radar
DNS · certificates · categories
Inspect a public scan and its recorded network and classification data.
AlienVault OTX
Threat-intelligence pulses
Look for indicator references and related community intelligence.
Wayback Machine
Historical evidence
Compare archived captures and preserve historical context.
abuse.ch ThreatFox
IOC correlation
Look for matching indicators and associated threat records.
crt.sh
Certificate Transparency
Inspect certificate records and related hostnames.
DNS Security Filters
Quad9 · AdGuard · CleanBrowsing
Compare security resolver responses and record observed blocking.
Web-Check
Surface inspection
Inspect the public DNS, TLS, HTTP and technology surface.
02Abuse reports & follow-upRegistrar, hosting and security channels
- Identify the responsible provider. Match registration and hosting records to the relevant abuse contact.
- Prepare an evidence package. Include the URL, public scan references, captures and the recorded observations.
- Send the report. Keep outgoing report records and recipient information when available.
- Recheck and publish updates. Track later scanner verdicts, provider responses and site availability.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
GoogleSafe Browsing↗
GoogleWeb Risk↗
MicrosoftSmartScreen↗
VirusTotalURL analysis↗
CloudflareRadar / abuse reporting↗
YandexSafe Browsing↗
URLScan.ioPublic scan↗
ESETSample / URL submission↗
BitdefenderURL submission↗
NortonSafe Web↗
SymantecÉvaluation du site↗
AviraURL reporting↗
Avast / AVGURL reporting↗
KasperskyOpenTIP↗
Dr.WebOnline scanner↗
NetcraftAbuse reporting↗
PhishTankCommunity reporting↗
APWG eCXPhishing intelligence↗
PhishStatsPublic feed↗
Phish.ReportHosting abuse↗
SpamhausDomain reputation↗
PolySwarmMulti-engine analysis↗
CheckPhishURL scan↗
QutteraMalware scan↗
URLqueryBrowser analysis↗
Criminal IPAsset intelligence↗
CRDFThreat Center↗
ScamadviserReputation check↗
MyWOTCommunity reputation↗
Related infrastructure
Shared hosting, registrar records and related domains
Domaines ressemblants
104 domaines ressemblants enregistrés
trustwallst.com
replacement Rapport interne
trustwallzt.com
replacement Rapport interne
trustgallet.com
bitsquatting Rapport interne
trustwallet3.com
addition Rapport interne
trustwallet7.com
addition Rapport interne
trustwalletn.com
addition Rapport interne
trustwalletz.com
addition Rapport interne
trustwcllet.com
bitsquatting Rapport interne
trustwsallet.com
insertion Rapport interne
trustwxallet.com
insertion Rapport interne
xn--trustwalle-b22e.com
homoglyph Rapport interne
grustwallet.com
replacement
Tout afficher (88)
t.rustwallet.com
subdomain
trastwallet.com
vowel-swap
trostwallet.com
vowel-swap
trsutwallet.com
transposition
trusfwallet.com
replacement
trusrwallet.com
replacement
trusstwallet.com
plural
trusttwallet.com
repetition
trustw.allet.com
subdomain
trustwa.llet.com
subdomain
trustwaklet.com
replacement
trustwalelt.com
transposition
trustwalket.com
replacement
trustwall3t.com
replacement
trustwalleet.com
repetition
trustwallef.com
replacement
trustwaller.com
replacement
trustwallit.com
vowel-swap
trustwalllet.com
repetition
trustwallot.com
vowel-swap
trustwallte.com
transposition
trustwlalet.com
transposition
trustwollet.com
vowel-swap
trustwullet.com
vowel-swap
trustwwllet.com
replacement
trustwzllet.com
replacement
trutswallet.com
transposition
truustwallet.com
repetition
trystwallet.com
replacement
turstwallet.com
transposition
rustwallet.com
omission
trestwallet.com
bitsquatting
trrustwallet.com
insertion
tructwallet.com
bitsquatting
truestwallet.com
insertion
truhstwallet.com
insertion
truistwallet.com
insertion
trusdtwallet.com
insertion
trusdwallet.com
bitsquatting
trust-wallet.com
hyphenation
trust2wallet.com
insertion
trustewallet.com
insertion
trustqwallet.com
insertion
trustrwallet.com
insertion
trustswallet.com
insertion
trustuallet.com
bitsquatting
trustvallet.com
bitsquatting
trustwa11et.com
homoglyph
trustwa1let.com
homoglyph
trustwaallet.com
insertion
trustwaiiet.com
homoglyph
trustwailet.com
homoglyph
trustwal1et.com
homoglyph
trustwalet.com
omission
trustwaliet.com
homoglyph
trustwallat.com
bitsquatting
trustwalldt.com
bitsquatting
trustwalle.com
omission
trustwallet0.com
addition
trustwallet4.com
addition
trustwallet5.com
addition
trustwallet6.com
addition
trustwalleta.com
addition
trustwalleth.com
addition
trustwalletj.com
addition
trustwalletk.com
addition
trustwalletr.com
addition
trustwallets.com
addition
trustwallett.com
addition
trustwalletx.com
addition
trustwallgt.com
bitsquatting
trustwallmt.com
bitsquatting
trustwallt.com
omission
trustwaqllet.com
insertion
trustwawllet.com
insertion
trustwellet.com
bitsquatting
trustwwallet.com
insertion
trustwzallet.com
insertion
trustywallet.com
insertion
truswallet.com
omission
trvstwallet.com
homoglyph
ttrustwallet.com
insertion
xn--trstwallet-beb.com
homoglyph
xn--trstwallt-i4a6r.com
homoglyph
xn--trustwalet-6yb.com
homoglyph
xn--trustwalet-toe.com
homoglyph
xn--trustwalle-5cc.com
homoglyph
xn--trustwallt-j7a.com
homoglyph
100 affichés sur 104
Infrastructure et rapports associés
- Lien direct Partage un fichier d'enregistrement ou un kit de hameçonnage identique.
- Signal auxiliaire Partage d'infrastructures ou de marque cible ; cela ne prouve pas qu'il s'agisse d'un seul et même opérateur.
- Uniquement pour la découverte Répertorié à des fins de navigation ; aucun attribut commun avec cet hôte.
Chaque ligne correspond à une raison pour laquelle un domaine est associé à cet hébergeur. La taille des nœuds indique les détections de VirusTotal et les nœuds en pointillés sont déjà hors ligne. Les listes complètes figurent ci-dessous.
Autres rapports sur le bord partagé Cloudflare 6
Ces rapports renvoient à la même adresse IP périphérique partagée. Ils facilitent la découverte des rapports mais n'impliquent pas de propriété commune ni de serveur d'origine partagé.
Trust Wallet usurpation d'identité 8
Ces domaines ciblent également les utilisateurs d'Trust Wallet. Afficher toutes les menaces liées à « Trust Wallet » →
Même bureau d’enregistrement: GMO Internet Group 6
Enregistrés auprès du même bureau d'enregistrement. Un bureau d'enregistrement dessert des millions de clients sans lien entre eux ; ce regroupement constitue donc simplement un constat et ne prouve pas l'existence d'un lien.
Rapports récents sur les menaces 6
Rapports récemment ajoutés à partir de la base de données PhishDestroy. Ces liens de découverte n’impliquent pas d’infrastructure ou de propriété partagée.
Evidence & investigation tools
Original reports, independent checks and evidence links
Données factuelles et rapports externes
Analyse de sécurité
Instantané des preuves transmises
Sent: Ledger records: 1
Case ID:
PD-20261017-BBD88E Recipient: onamae@internet.gmo Page title stored with report: Trust Wallet Invest | Register
PDF notice generated Notice text archived (856 chars)
Abuse notice text as sent to the provider
AUP & Terms of Service Violations: Acceptable Use Policy: Active phishing operations targeting internet users directly violate standard AUP provisions prohibiting fraud and deceptive practices. Terms of Service: Material breach of service terms regarding malicious use, providing contractual justification for immediate suspension. Applicable Legal Framework (Unknown): International Anti-Cybercrime Regulations Budapest Convention on Cybercrime Universal Fraud Prevention Laws Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws. Investigation Notice: We fully respect your internal investigation processes and discretion. Prompt remediation protects innocent users while mitigating regulatory compliance scrutiny, legal liability, and brand reputation risks associated with ongoing malicious infrastructure.
OSINT et renseignement
DNS et réseau
Référencement naturel et nom de domaine
Analyse approfondie
Help & reporting
Recovery steps, reporting contacts and complaint drafts
Help & reporting
Ce site vous a-t-il affecté ?
6 evidence signal groups linked
1 stored notification records
Non vérifié
If credentials were compromised, report immediately. Do not engage with recovery scammers.
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Official reporting routes
Action Fraud
Report online
Signaler la fraude et la cybercriminalité en Angleterre, au Pays de Galles et en Irlande du Nord
Contact centre0300 123 2040
PhishDestroy listing review Pas un rapport des forces de l'ordre
Recours en matière de nom de domaine
Demandez un examen si vous possédez ce domaine et pensez que la liste est incorrecte
Méfiez-vous des escrocs qui prétendent vous aider à récupérer vos biens ! Les criminels peuvent recontacter leurs victimes tout en se faisant passer pour des enquêteurs, des avocats ou des agents de recouvrement. Ne payez pas de frais initiaux et ne partagez pas vos informations d'identification. En savoir plus sur la fraude liée aux aides à la reprise →
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Annuaire de 97 pays
Template-based draft · optional AI wording assistance requires separate consent
Brouillon assisté par l'IA : les détails de l'incident sont traités par le fournisseur d'IA · Examinez-le et soumettez-le vous-même
Recommandations et conseils à l'intention des victimes
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Que dois-je faire tout de suite ?
UrgentStop using the suspicious site. Open the real service through its official app or an address you already trust.
- Modifier tous les mots de passe — e-mail, comptes Exchange, tout ce qui utilise le même mot de passe
- Activer l'authentification à deux facteurs (2FA) en utilisant une application d'authentification (et non par SMS). Désactivez la récupération par SMS
- Cartes « Freeze » si vous avez saisi vos coordonnées bancaires sur le site de hameçonnage
Quelles informations dois-je rassembler pour mon rapport ?
Directives du FBIKeep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
- Payment records — if you paid, save the receipt, amount, date, payment provider and recipient details.
- Dates et horaires exacts — de chaque transaction et du premier contact avec l'escroc
- Captures d'écran — sites web frauduleux, messages de chat, e-mails, transactions via des portefeuilles numériques, réseaux sociaux
- Toutes les URL et tous les noms de domaine utilisés par l'escroc (notamment
trustwalletinvest.site) - Communications — les e-mails, SMS, numéros de téléphone et noms d'utilisateur utilisés par l'escroc
Même si vous ne disposez pas de tous les détails — déposer quand même une plainte. Même des informations partielles peuvent aider les enquêtes.
À qui dois-je signaler cette arnaque ?
- FBI IC3 — Centre de signalement des délits sur Internet (système fédéral américain de signalement)
- Europol — Rapports sur la cybercriminalité en Europe (UE)
- Your bank or payment provider — contact its fraud team promptly through official contact details if money or card information was exposed.
- Police locale — permet de consigner officiellement la situation, même s’ils ne peuvent pas agir immédiatement
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
How do phishing scams typically work?
- Faux sites web — des clones identiques au pixel près de sites légitimes, dont les noms de domaine ont été légèrement modifiés
- Découpe du porc — une relation de confiance établie au fil des semaines via Telegram, WhatsApp ou des applications de rencontre, puis une escroquerie financière
- Arnaques liées au recouvrement — fraudsters pose as recovery agents and demand upfront fees. Never share a seed phrase or pay before independently verifying the provider
- Escroqueries basées sur l'IA — les « deepfakes », le hameçonnage automatisé et les sites générés par l'IA, qui rendent la fraude plus difficile à détecter
Comment puis-je me protéger à l'avenir ?
- Ajouter les sites officiels à vos favoris — Ne cliquez jamais sur les liens contenus dans les e-mails, les messages privés ou les publicités
- Vérifier les noms de domaine — vérifier si PhishDestroy avant d'entrer en contact. Vérifiez le protocole HTTPS, l'orthographe et l'ancienneté du domaine
- « Trop beau pour être vrai » = arnaque — des rendements garantis, des témoignages de célébrités, des délais serrés
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif
À propos de ce rapport : trustwalletinvest.site
Ce rapport présente les dernières preuves stockées disponibles pour PhishDestroy. Les horodatages sources sont affichés lorsqu'ils sont disponibles ; la disponibilité et les verdicts des fournisseurs peuvent changer après la collecte.
Le site capturé affichait le titre de la page “Trust Wallet Invest | Register” et usurpait peut-être l'identité de Trust Wallet.
Depuis 2026-10-17 19:06:46 UTC, trustwalletinvest.site avait des détections provenant des moteurs de sécurité 2.
Each source records a particular observation. A screenshot, an available website, or a result with no detections does not establish that a site is safe. Source results can change after they are collected.
Si vous pensez que cette liste est inexacte, déposer un recours. Pour en savoir plus sur notre méthodologie, visitez le Page FAQ.