secure[.]inc-trust-wallet-locked[.]es
“www.bing.com”
secure.inc-trust-wallet-locked.es — Terselubung · dapat dijangkau. Peniruan identitas merek: Trust Wallet; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 6/91 (ADMINUSLabs, Chong Lua Dao, CRDF, CyRadar, Fortinet); Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); cloaking observed; PhishDestroy score 68/100.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain secure.inc-trust-wallet-locked.es was registered on 21 February 2026 and remains active as of 12 July 2026. It is flagged under the threat type “brand_impersonation” targeting the Trust Wallet brand. The domain resolves to the IPv4 address 104.21.41.180, which is hosted by Cloudflare, Inc. in Canada. The site currently returns an HTTP 403 response, and the page title reported by scanners is “www.bing.com”, a mismatch that suggests intentional obfuscation.
Automated reputation services assign a Gridinsoft trust score of 0 out of 100, indicating a completely untrusted classification. The SSL certificate presented is identified only as “WE1”, without further validation details, which is typical of rapidly deployed malicious infrastructure. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service, confirming that it is recognized by at least one mitigation platform.
Analysis indicates the domain is being used to impersonate Trust Wallet, a popular cryptocurrency wallet application, and is categorized as a cryptocurrency‑related scam. No additional content has been captured beyond the page title, so the exact payload or credential‑harvesting mechanism remains unknown. The presence of a Cloudflare front‑end suggests the operators are leveraging the provider’s CDN and protection services to hide the true origin of any malicious payloads.
Defenders should add 104.21.41.180 and secure.inc-trust-wallet-locked.es to deny‑list rules on perimeter and endpoint filters, and monitor DNS queries for the domain. Continuous re‑inspection of the URL is advised to detect any change in HTTP status or content that could reveal phishing forms or malicious scripts. Coordination with threat‑intel sharing feeds is recommended to track any emergence of additional indicators of compromise linked to this infrastructure.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive