secure[.]inc-trust-wallet-locked[.]es
“www.bing.com”
secure.inc-trust-wallet-locked.es — Ammantato · raggiungibile. Simulazione del marchio: Trust Wallet; Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 6/91 (ADMINUSLabs, Chong Lua Dao, CRDF, CyRadar, Fortinet); Spamhaus DBL_PHISH; cloaking observed; PhishDestroy score 68/100.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
The domain secure.inc-trust-wallet-locked.es was registered on 21 February 2026 and remains active as of 12 July 2026. It is flagged under the threat type “brand_impersonation” targeting the Trust Wallet brand. The domain resolves to the IPv4 address 104.21.41.180, which is hosted by Cloudflare, Inc. in Canada. The site currently returns an HTTP 403 response, and the page title reported by scanners is “www.bing.com”, a mismatch that suggests intentional obfuscation.
Automated reputation services assign a Gridinsoft trust score of 0 out of 100, indicating a completely untrusted classification. The SSL certificate presented is identified only as “WE1”, without further validation details, which is typical of rapidly deployed malicious infrastructure. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service, confirming that it is recognized by at least one mitigation platform.
Analysis indicates the domain is being used to impersonate Trust Wallet, a popular cryptocurrency wallet application, and is categorized as a cryptocurrency‑related scam. No additional content has been captured beyond the page title, so the exact payload or credential‑harvesting mechanism remains unknown. The presence of a Cloudflare front‑end suggests the operators are leveraging the provider’s CDN and protection services to hide the true origin of any malicious payloads.
Defenders should add 104.21.41.180 and secure.inc-trust-wallet-locked.es to deny‑list rules on perimeter and endpoint filters, and monitor DNS queries for the domain. Continuous re‑inspection of the URL is advised to detect any change in HTTP status or content that could reveal phishing forms or malicious scripts. Coordination with threat‑intel sharing feeds is recommended to track any emergence of additional indicators of compromise linked to this infrastructure.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Analisi di VirusTotal
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo