trustwalletconnect[.]net
“Alpha - Build the Future of Web3”
trustwalletconnect.net — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Trust Wallet; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 10/93 (ADMINUSLabs, BitDefender, CyRadar, Fortinet, G-Data); URLQuery 2 alerts; Spamhaus DBL_PHISH; PhishDestroy score 84/100. Registrar: Ultahost.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain www.trustwalletconnect.net was registered on February 21, 2026 through Ultahost, Inc. and is hosted on the Ultahost network (AS214036) in the Netherlands, resolving to IP address 192.142.10.5. All four authoritative name servers—ns1.ultahost.com, ns2.ultahost.com, ns3.ultahost.com, and ns4.ultahost.com—point to the same provider, indicating that the infrastructure is fully controlled by a single hosting entity. No TLS certificate was observed for the site, meaning all HTTP traffic would be unencrypted. The page title returned by the server is "Alpha - Build the Future of Web3," which aligns with a crypto‑focused narrative but does not directly disclose a login interface or credential collection form.
VirusTotal scans show that ten of ninety‑three security vendors flagged the domain as malicious, and the domain appears on one external blocklist. PhishDestroy has taken the site offline, and current online status confirms the domain is no longer serving content. The identified threat category is a crypto scam that impersonates the Trust Wallet brand, suggesting the intent was to lure cryptocurrency users into a credential‑stealing or fund‑diversion flow.
Defenders should immediately add www.trustwalletconnect.net to URL and DNS blocklists, enforce network‑level denial of the associated IP address (192.142.10.5), and monitor for any resurgence of the domain or similar sub‑domains hosted on the same name servers. Continuous observation of Ultahost‑related registrations and rapid ingestion of any newly observed indicators from threat‑intel feeds will help mitigate the risk of re‑deployment. Given the absence of an SSL certificate and the offline status, the site’s current operational risk is limited, but the underlying infrastructure remains capable of being reactivated, so proactive blocking and ongoing surveillance are recommended.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive