MALICIOUS — CRITICAL
createtrc20token[.]com
The domain createtrc20token.com is a cryptocurrency phishing site engaged in brand impersonation targeting OKX users.
- VirusTotal
- 3/91
- Blocklists
- No stored match
- Disponibilidade
- Último ativo conhecido · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
createtrc20token.com — Último ativo conhecido (HTTP 200). Tipo de golpe: Crypto Scam. Resumo das evidências: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 71/100. Registrador: Dominet (HK).
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Evidence Analysis
The domain createtrc20token.com is a cryptocurrency phishing site engaged in brand impersonation targeting OKX users. It presents itself as a TRC20 token creation service but is designed to deceive victims into disclosing wallet credentials or transferring funds under false pretenses. No drainer kit was identified, and the site is currently taken offline.
Technical indicators confirm elevated risk: 1 of 95 VirusTotal security vendors flagged createtrc20token.com, while Google Safe Browsing has not marked it. The domain appears on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. Registered through Dominet (HK) Limited on February 21, 2026, it resolves to IP address 172.67.170.253, hosted behind Cloudflare in Canada. The observed page title was 'Create TRC20 Token on TRON — TRC-20 Token Factory | createtrc20token.com', and technologies detected include jsDelivr, Cloudflare Browser Insights, and HTTP/3. No SSL issuer information is available, and the Gridinsoft trust score is 0/100.
Victims of createtrc20token.com should immediately revoke any token approvals granted to unknown contracts using tools like Etherscan or BscScan. Move remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Change passwords for any accounts accessed during the interaction, enable two-factor authentication, and report the incident to the impersonated brand (OKX) and relevant authorities such as the FBI’s IC3 or local cybercrime units. Additionally, submit the domain to Google Safe Browsing and other blocklist providers to prevent further abuse.
Cobertura dos dados12 recorded checks
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Inteligência de Domínios
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologias · 4 identified
Free public CDN for open-source projects, serving files from npm and GitHub.
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of createtrc20token.com · checked Mar 2, 2026
Evidências e relatórios externosIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.