Lompat ke laporan keamanan
Checked 09/08/2026 Ref 9328466E

MALICIOUS — HIGH

twt-auth.cfd Phishing Intelligence Report - PhishDestroy

twt-auth[.]cfd

The domain twt-auth.cfd hosts a page titled "TrixWallet — TRON Blockchain Wallet" and is classified as an impersonation scam targeting the Blockchain.com brand.

65/100 evidence score · High
VirusTotal
4/91
Blocklists
No stored match
Ketersediaan
Belum terverifikasi
Report / Add Evidence Appeal this listing
2026-06-23 08:19 UTCBelum terverifikasi
View full size Wayback Unduh

Do not enter credentials, seed phrases, payment details, or personal information on this domain.

⚠️
Domain ini telah ditandai sebagai berbahaya
Mesin keamanan melaporkan deteksi: 4. Berhati-hatilah — jangan memasukkan kredensial atau informasi pribadi.
ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence

The sent-report ledger records the first outgoing report at . The recorded recipient is abuse@digitalocean.com. The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report
1 month
Reports sent
1
Latest case ID
PD-20260619-6AD220
Current status
Observed active at latest stored check
Jump to section
Ringkasan laporan

twt-auth.cfd — Belum terverifikasi. Peniruan identitas merek: Blockchain.com; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 4/91 (alphaMountain.ai, Fortinet, SOCRadar, Webroot); URLQuery 1 alert; Spamhaus DBL_PHISH; PhishDestroy score 65/100. Registrar: Global Domain Group.

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Evidence Analysis

Stored AI analysis · 23/06/2026

Ref 9328466E

The domain twt-auth.cfd hosts a page titled "TrixWallet — TRON Blockchain Wallet" and is classified as an impersonation scam targeting the Blockchain.com brand. This site poses a credential theft threat by mimicking a legitimate cryptocurrency wallet service to deceive users into disclosing sensitive login information or private keys.

Technical evidence confirms the malicious nature of this domain. VirusTotal reports 4 detections out of 95 security vendors. The domain was created on 2026-06-09 and registered through Global Domain Group LLC. It resolves to IP address 138.197.182.119 hosted on AS14061 (DigitalOcean, LLC) located in Germany. The site uses an SSL certificate issued by Let's Encrypt with identifier YE2. Nameservers are ns-cloud-d1.googledomains.com, ns-cloud-d2.googledomains.com, and ns-cloud-d3.googledomains.com. The domain has been flagged by alphaMountain.ai, Fortinet, SOCRadar, and Webroot, and appears on 1 blocklist.

The site is currently offline. Its domain risk score is 61, indicating a high threat level. Users should avoid any interaction with this domain and treat any past exposure as potentially compromised.

Stored source results

Recorded verdicts and infrastructure observations for this domain.

VirusTotal
VirusTotal
4 det.
URLQuery
URLQuery
1 threat alert
URLScan
URLScan
Laporan ↗
Sertifikat TLS
Let's Encrypt / YE2 29d
Usia
2 mo New
Status terpantau
Belum terverifikasi
PhishDestroy
Daftar Hapus
Terdaftar
Reports Sent
1
Cakupan data12 recorded checks
VirusTotal 4 / 91 URLQuery 1 threat-system alert PhishStats tidak diperiksa OTX no community references CF Radar no data URLScan capture laporan yang disimpan URLScan verdict Analisis selesai Pemblokiran DNS tidak diperiksa TLS valid certificate, 29d WHOIS 2 mo old Tangkapan layar 3 captures · 3 sources Rantai pengalihan tidak diselidiki
Intelijen Keamanan Jaringan
Threat Detection Systems 1 alert
Detection System Indicator Verdict Alert
DNS4EU twt-auth.cfd malicious Sinkholed
Stored URLQuery scan evidence · Jun 19, 2026 09:39 UTC Open source report

Alur Tanggapan Ancaman Pipeline

Penemuan
Checks
Reports
Ketersediaan
10/11
Ancaman Telah Diterima
twt-auth.cfd telah terdeteksi dan dimasukkan ke dalam antrian untuk analisis menyeluruh
19/06/2026
URLScan.io Capture
Stored URLScan report with capture artifacts
23/06/2026
URLScan Verdict
Analisis URLScan selesai; hasil tangkapan web ini tidak mengubah keputusan ancaman halaman · score 0
29/07/2026
VirusTotal
4/91 recorded on VirusTotal
18/07/2026
Google Safe Browsing
19/06/2026
Brand Impersonation
Impersonation of Blockchain.com
Forensic Evidence Collected
Stored evidence from URLScan.io, URLQuery, stored screenshot
23/06/2026
Technical Analysis Recorded
Laporan tersebut berisi teknologi tersimpan atau hasil analisis forensik.
09/08/2026
Sent Report Recorded
Stored sent-report record for registrar Global Domain Group LLC, hosting provider, 2 abuse contacts
abuse@digitalocean.comabuse@globaldomaingroup.com
19/06/2026
Daftar yang Dihapus Telah Dipublikasikan
19/06/2026
Ketersediaan belum diverifikasi
Respons terbaru tidak cukup untuk mengklasifikasikan ketersediaan saat ini.

Status Daftar Blokir Publik

Tangkapan tersimpan

Primary capture 1 / 3
Lihat Ukuran Penuh Wayback Unduh
Judul Halaman
TrixWallet — TRON Blockchain Wallet
Sertifikat TLS
Valid transport encryption · Diterbitkan oleh Let's Encrypt / YE2 · valid for 29 days

Intelijen Domain

Domain
URLScan Verdict Analisis selesai score 0 report ↗
Server / ASN nginx · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC, US
Reputasi IP abuse score 0/100 2 reports checked 27/07/2026
Registrar Global Domain Group US(US)
Kontak penyalahgunaanabuse@digitalocean.com, abuse@globaldomaingroup.com
Pendaftar ICANNPenyedia layanan pendaftaran resmi yang terakreditasi ICANN →
Pencarian WHOISICANN RDAP untuk twt-auth.cfd →
Alamat IP 138.197.182.119 DE
LokasiDE Frankfurt am Main, DE
JaringanAS14061 · DigitalOcean, LLC
IP terbalikviewdns.info → rapiddns.io →
PendaftaranDibuat 09/06/2026 (61d · New) — Expires 09/06/2027
Rincian teknisDNS, SAN SSL, cap waktu
Pertama Kali Terdeteksi19/06/2026
DOM Analysisanalyzed 28/07/2026score 0/100
IoC Extractionscanned 01/08/20260 wallet · 0 Telegram IoCs
Submitted URLhttps://twt-auth.cfd/
Server namans-cloud-d1.googledomains.comns-cloud-d2.googledomains.comns-cloud-d3.googledomains.comns-cloud-d4.googledomains.com
TLS Fingerprint
TLS Observationvalid from 09/06/2026scanned 19/06/2026
Case ID
ZONA SHORTDOT · BUKTI PUBLIK .cfd

ShortDot zone evidence

The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.

ShortDot SA · Luxembourg 7 zona · bukti seluruh zona diperbarui setiap hari Buka repositori bukti ShortDot
ICANN OVERSIGHT

Akreditasi dan konteks RAA

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Akreditasi adalah kontrak, bukan cap jaminan keamanan. Verifikasi biaya ICANN Baca RAA §3.18 PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Accountability draft Tidak ada yang dikirim secara otomatis.
Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Analisis VirusTotal

4 / Vendor keamanan 91 menandai domain ini
View on VT
Last analyzed
alphaMountain.ai
Fortinet
SOCRadar
Webroot
Bukti & Laporan EksternalIndependent lookups and source reports
Analisis Keamanan
URLScan Analyzed VirusTotal 4 det. ChainPatrol URLQuery 1 threat alert Gridinsoft SSL Laboratorium Stored TLS valid WOT ScamAdviser Pemeriksa Daftar Hitam URLVoid Sucuri SiteCheck Observatorium MDN
Submitted Evidence Snapshot
Sent: Ledger records: 1 Case ID: PD-20260619-6AD220 Recipient: abuse@digitalocean.com
OSINT & Intelijen
Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox Batu Hudson Sign-in search IntelX crt.sh Sertifikat WHOIS Wayback
DNS & Jaringan
nslookup.io DNS bgp.tools ASN /Rute
SEO & Domain
SpyFu Moz DA/PA Ahrefs Tautan balik Analisis Mendalam
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.

Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.

Europol
Temukan saluran pelaporan resmi untuk negara UE Anda
National police directory
PhishDestroy listing review Bukan laporan penegakan hukum
Banding atas Nama Domain
Minta peninjauan jika Anda pemilik domain ini dan yakin cantumannya salah
Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.

Direktori 97 negara
Draf yang dibantu AI — detail insiden diproses oleh penyedia AI Tinjau dan kirimkan sendiri
Sematkan Laporan IniRead-only HTML widget
HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html 
<iframe
  src="https://phishdestroy.io/id/embed/domain/twt-auth.cfd"
  title="PhishDestroy threat report for twt-auth.cfd"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

Surat Terima Kasih yang Sangat Tulus

Pembuat draf satir

Penerima
Konteks biaya

Draf satir. Angka biaya merupakan perkiraan; tidak diklaim bahwa angka tersebut secara tepat terkait dengan domain ini.