VirusTotal
5 / 95
BildirEngine detections from this stored analysis. Vendors and collection times may differ from other sources.
“Support : Multi-Wallet Support”
Assessment based on the stored source evidence below. Review sources →
duplicate-disabled-1273.invalid — İçerik kullanılamıyor. Marka kimliğine bürünme: Trust Wallet; Dolandırıcılık türü: Crypto Scam. Kanıt özeti: VirusTotal 5/95 (Bfore.Ai PreCrime, Chong Lua Dao, Forcepoint ThreatSeeker, Gridinsoft, Webroot); PhishDestroy score 80/100. Kayıt kuruluşu: Tucows.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
These are dated observations, not a live safety check. No flag, a stored capture, or a completed analysis does not establish that a site is safe.
5 / 95
BildirEngine detections from this stored analysis. Vendors and collection times may differ from other sources.
3/14
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
1 community reference
BildirCommunity publication references, not a vendor verdict or evidence of a common operator.
provider verdict: clean
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
saklanan rapor
View stored capture ↗ BildirA preserved page image documents what the collector received; a capture is not a safety verdict.
Checked; no threat flag recorded
BildirA result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
0 external matches
AyrıntılarA result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
AI-assisted analysis Stored narrative · generated . Provider checks below retain their own observation dates. This narrative is an interpretation of collected evidence, not an independent source verdict.
This domain presents an elevated risk as a brand impersonation threat specifically targeting Trust Wallet users. The domain is designed to deceive visitors into believing it offers legitimate multi-wallet support, while its actual purpose is to harvest credentials or other sensitive information from cryptocurrency wallet users. The risk level is elevated due to the combination of brand impersonation and confirmed malicious indicators.
Technical indicators for www.supportmultiwallet.com include a VirusTotal detection rate of 5 out of 95 security vendors, meaning five security vendors flagged it as malicious. The domain was registered through Tucows Domains Inc. on May 27, 2025, and resolves to IP address 64.29.17.65. Infrastructure analysis reveals the use of Ruby on Rails, Vercel hosting, and HSTS. The domain appears on four security blocklists and is blocked by Polkadot, Codeesura, PhishDestroy, and Enkrypt. Gridinsoft trust score is 0 out of 100, and AlienVault OTX shows it in one threat intelligence pulse. The SSL certificate was issued by GoDaddy.com, and the page title was Support : Multi-Wallet Support. The domain is currently offline.
To mitigate risks from this specific brand impersonation threat, users should avoid visiting domains that mimic legitimate wallet support pages and never enter private keys, recovery phrases, or login credentials on any site reached via unsolicited links. Always verify the official URL of Trust Wallet support through trusted sources, enable two-factor authentication on cryptocurrency accounts, and report any suspicious domains to security blocklists or anti-phishing services. Since the domain is now offline, users who previously interacted with it should scan their devices for malware and immediately change any credentials that may have been exposed.
20 · datasets with records / 11 · not recorded
What this report contains, where it came from, and when it was collected. A retained record can be incomplete; collection status is separate from the threat assessment.
These checks have no retained result. This does not mean they passed or that a scan is running.
0 · external source matches
Tucows Domains Inc. · 64.29.17.65 · DNS, TLS and retained responses
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Edge-IP itibarı bu etki alanıyla ilişkilendirilmez.
ns1.vercel-dns.comns2.vercel-dns.comLocation describes the IP network.
53ac93a76abde87ab754796eb9e449509be2110e885bd1f25b52550c1da79207supportmultiwallet.comSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of duplicate-disabled-1273.invalid · checked Mar 2, 2026
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Stored browser and crawler observations
Bu ana bilgisayar için saklanmış tarayıcı-karşı-tarayıcı gözlemleri ile Keitaro tarzı trafik dağıtım sistemleri için gerçek zamanlı parmak izi kontrolü.
Tarayıcı notu: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='duplicate-disabled-1273.invalid', port=80): Max retries exceeded with url: / (Caused by Ne
Kaydedilmiş canlı kontrol sonucu yok.
Collection history, report status and investigation channels
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
Bilinmiyor
stale_current_evidence
13 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Shared hosting, registrar records and related domains
104 kayıtlı benzer alan adı
104 kaydın 100 kadarı gösteriliyor
Original reports, independent checks and evidence links
Recovery steps, reporting contacts and complaint drafts
Listed domains receive at least one abuse report; this entry has no retained notification history.
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
duplicate-disabled-1273.invalid)Tüm ayrıntıları bilmeseniz bile — yine de şikayette bulun. Kısmi bilgiler de soruşturmalara yardımcı olmaktadır.
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraŞüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirSon kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleCanlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin
Bu rapor, PhishDestroy'un kullanabileceği en son saklanan kanıtları sunar. Kaynak zaman damgaları mümkün olan yerlerde gösterilir; Stok durumu ve satıcı kararları toplama sonrasında değişebilir.
Yakalanan site “Support : Multi-Wallet Support” sayfa başlığını gösteriyordu ve Trust Wallet'nin kimliğine bürünüyor olabilir.
2026-06-27 05:06:01 UTC itibarıyla duplicate-disabled-1273.invalid, 5 güvenlik motorlarından tespitler aldı.
Each source records a particular observation. A screenshot, an available website, or a result with no detections does not establish that a site is safe. Source results can change after they are collected.
Bu listenin hatalı olduğunu düşünüyorsanız itirazda bulunmak. Metodolojimiz hakkında bilgi edinmek için SSS sayfası adresini ziyaret edin.