kucoin[.]ddt16888[.]cc
“Trust Wallet”
kucoin.ddt16888.cc — Konten tidak tersedia. Peniruan identitas merek: Coinbase; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 15/95 (ADMINUSLabs, BitDefender, Chong Lua Dao, CyRadar, ESET); URLQuery 100 det.; URLScan malicious verdict; Google Safe Browsing flagged; PhishDestroy score 95/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This domain, kucoin.ddt16888.cc, was created on 10 August 2025 and is currently taken offline. Infrastructure analysis shows it resolves to the IPv4 address 134.122.201.140, which is assigned to CTG Server Limited in Hong Kong under ASN 152194. The domain is registered through Gname.com Pte. Ltd. and uses the authoritative name servers a5.share-dns.com and b5.share-dns.net. No TLS certificate is present, indicating that HTTPS connections are not supported. Google Safe Browsing classifies the site as a social‑engineering threat, and the platform PhishDestroy has already blocked it.
VirusTotal reports that fifteen of ninety‑five scanners flag the domain, reinforcing the malicious assessment. Gridinsoft assigns a trust score of zero out of one hundred, and the domain appears on one additional security blocklist. The page title returned by the web server is “Trust Wallet,” while the observed scam type is listed as a crypto scam that impersonates Coinbase. No further page content has been captured, so the exact lure presented to victims remains unknown. Defenders should add the domain and its resolving IP to block lists, monitor the registrar Gname.com for future registrations that share similar naming patterns, and enforce outbound filtering for connections to the Hong Kong host.
Continuous observation of the shared DNS infrastructure (a5.share-dns.com, b5.share-dns.net) is recommended because abuse of these name servers has been observed in other phishing campaigns. Because the site lacks a valid SSL certificate, any attempt to deliver credentials over HTTP would be transmitted in clear text, offering an additional vector for credential theft. Organizations should also ensure that users are educated about the discrepancy between the “Trust Wallet” title and the impersonated Coinbase brand, as this mismatch can be a strong indicator of a fraudulent landing page.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Intelijen Forensik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive