globalhrcap[.]com[.]trustwellcb[.]com
“Home - Global Hills Reliance Capital Bank”
globalhrcap.com.trustwellcb.com — Konten tidak tersedia. Peniruan identitas merek: Trust Wallet; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 11/95 (alphaMountain.ai, BitDefender, CyRadar, ESET, Fortinet); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 95/100. Registrar: Dynadot.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain globalhrcap.com.trustwellcb.com indicates it was actively impersonating Trust Wallet, a cryptocurrency wallet service, as of its operational period. The domain, now offline, was registered on September 17, 2025, through Dynadot LLC and resolved to the IP address 192.3.190.188, hosted on AS36352 (HostPapa) in the United States. Infrastructure analysis reveals the domain used nameservers dns1.webproserver.com and dns2.webproserver.com, a common pattern in low-reputation hosting environments. No SSL certificate was present, a red flag for user security and legitimacy. The page title, 'Home - Global Hills Reliance Capital Bank,' does not align with the claimed Trust Wallet branding, suggesting either a generic template or an attempt to mislead users under a false financial institution guise.
The domain was flagged by 11 of 95 security vendors on VirusTotal and appeared on at least one security blocklist, with PhishDestroy marking it as malicious. Gridinsoft assigned a trust score of 0/100, further corroborating its high-risk classification. The scam type is classified as a crypto scam, consistent with the impersonation of Trust Wallet. While the domain is currently offline, its infrastructure remains a potential indicator of compromise.
Defenders should monitor for re-registration or reuse of the IP address, nameservers, or registrar. Historical DNS records and passive DNS data may provide additional context for tracking related campaigns. No evidence of a phishing kit or specific payload was provided, so the exact mechanics of the scam remain unconfirmed. Organizations are advised to block the domain and associated IP at perimeter security controls and alert users to the impersonation risk.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: trustwellcb.com
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain trustwellcb.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive