user6817[.]trustvirtual[.]org
“Aura Pay l Crypto Card without KYC”
साक्ष्य सारांश
The domain user6817.trustvirtual.org has been identified as a brand impersonation threat targeting Mastercard. The site impersonates a legitimate financial service provider, potentially misleading users into divulging sensitive information. No specific drainer kit was identified, but the threat level is elevated due to the high risk of credential theft and financial fraud.
Technical analysis reveals that the domain has been flagged by 17 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. The domain was registered through Global Domain Group LLC and resolves to the IP address 172.67.143.192, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain was created on February 21, 2026, and currently appears on two security blocklists. Notably, the site does not have an SSL certificate, which is a common indicator of a legitimate web presence.
As of the latest assessment, the domain is offline, which suggests that it has been taken down or is no longer active. However, the infrastructure used by the threat actors, such as the registrar and IP address, remains a potential risk. Security teams are advised to monitor these indicators for any signs of reactivation. Users should exercise caution when encountering similar domain names or websites claiming to offer financial services without proper verification, and report any suspicious activity to their respective security teams.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260201-40B323- PDF दस्तावेज़
- PDF प्रमाण
प्रमाण का पूरा पाठ
Section 3.1 of AUP: The domain user6817.trustvirtual.org is engaged in phishing activities, which are explicitly prohibited under your Acceptable Use Policy.
Section 5.2 of TOS: The registrar reserves the right to suspend or terminate services for any activities that violate the terms, including fraud and deception, both of which are evident in the operation of this domain.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. federal law prohibits unauthorized access to computers and networks, which includes phishing schemes that deceive users into providing sensitive information.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities through electronic communications, directly applicable to the fraudulent activities associated with this domain.
CAN-SPAM Act (15 U.S.C. § 7701): This act regulates commercial email and prohibits misleading headers and deceptive subject lines, which are often utilized in phishing attacks.
Regulatory Note: Failure to act on this report may expose your organization to legal liability and regulatory scrutiny, as continued hosting of this domain could be interpreted as complicity in its unlawful activities.
Data Coverage
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | user6817.trustvirtual.org |
phishing | Phishing Block |
| Hagezi Threat Feed | user6817.trustvirtual.org |
malicious | Sinkholed |
| DNS4EU | user6817.trustvirtual.org |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 12/08/2026
पहचान समयरेखा
-
Cloudflare Radar
Cloudflare Radar स्कैन संग्रहीत · स्कैन खोलें
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
Registration: trustvirtual.org
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain trustvirtual.org behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
वायरसटोटल विश्लेषण
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।