MALICIOUS — CRITICAL
trusted-account[.]com
Analysis of trusted-account.com indicates an active credential‑phishing operation targeting users who may be lured by the page title "🛡️ Trusted Account - Trusted Account".
- VirusTotal
- 10/91
- Blocklists
- No stored match
- Доступність
- Останній відомий активний · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@hetzner.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
trusted-account.com — Останній відомий активний (HTTP 200). Тип шахрайства: Credential Phishing. Зведення доказів: VirusTotal 10/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); PhishDestroy score 90/100. Реєстратор: DreamHost.
Докладний аналіз PhishDestroy AI нижче залишено англійською, щоб зберегти оригінальний криміналістичний запис.
Evidence Analysis
Analysis of trusted-account.com indicates an active credential‑phishing operation targeting users who may be lured by the page title "🛡️ Trusted Account - Trusted Account". The domain was registered on February 21 2026 through DreamHost, LLC and is hosted on a Hetzner Online GmbH server in Finland (AS24940) at IP address 65.108.111.55. HTTP requests return a 200 status, and the site presents a valid Let’s Encrypt R13 SSL certificate, suggesting the operators are attempting to convey legitimacy. Infrastructure inspection reveals the use of WordPress with MySQL, PHP, Apache HTTP Server, and a StackPath CDN, alongside client‑side libraries such as jQuery and Google Analytics.
The domain resolves to four nameservers (ns1‑ns4.o3host.net), a pattern commonly observed in malicious hosting setups. Threat intelligence records show the domain appears in one security blocklist and has been flagged by PhishDestroy. AlienVault OTX lists the domain in a single pulse, and VirusTotal reports eight of ninety‑three scanners flagging the site, reinforcing the suspicion of malicious activity. The Gridinsoft trust score of 0 / 100 further underscores its low reputation.
While the exact phishing landing page content has not been examined, the combination of a credential‑phishing classification, active blocklist entries, and multiple vendor detections provides strong evidence of a high‑risk threat. Defenders should add 65.108.111.55 and the domain to blocklists, monitor DNS queries for the listed nameservers, and enforce strict URL filtering for any traffic to trusted‑account.com. Continuous re‑scanning with VirusTotal and updating intrusion‑detection signatures is advised to capture any evolving payloads or infrastructure changes.
Обсяг даних12 recorded checks
Процес реагування на загрози Pipeline
Статус у публічних блоклистах
Збережений знімок
Аналітика доменів
Технічні деталіDNS, SAN-адреси SSL, мітки часу
ICANN OVERSIGHT
Акредитація та контекст RAA
Акредитація та контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Технології · 8 identified
Open-source CMS powering over 40% of websites worldwide.
Open-source relational database management system.
Server-side scripting language designed for web development.
Most widely used open-source HTTP server software.
Plugin to detect and restore deprecated jQuery features.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
Web analytics service tracking website traffic and user behavior.
marketingplatform.google.comАналіз VirusTotal
Архівні докази
Аналіз продуктивності сайту
Google PageSpeed Insights — mobile performance audit of trusted-account.com · checked Mar 2, 2026
Докази та зовнішні звітиIndependent lookups and source reports
PD-20260126-07F2BF Recipient: abuse@hetzner.com Victim safety and official reportingImmediate actions and verified reporting channels
Якщо ви ввели облікові дані облікового запису, особисту чи платіжну інформацію або завантажили файл із цього домену, негайно вживіть заходів. Нижче наведено ресурси, які допоможуть вам повідомити про інцидент і захистити себе.
Зверніться до місцевих органів влади
Виберіть свою країну, щоб отримати офіційні контакти кіберзлочинців або створити проект скарги →.