域安全和威胁情报

cardstrustwalletvcc.icu

注册商: NiceNIC
Resolved IP: 188.114.96.1
Registered: 2026年9月8日

威胁判定高

56/100

可用性 未验证 未存储最终的当前响应

风险信号

病毒检测总数：2/92 品牌冒充：Trust Wallet

报告概览

cardstrustwalletvcc.icu — 未验证. 品牌冒充：Trust Wallet. 证据摘要: VirusTotal 2/92 (alphaMountain.ai, Fortinet); URLScan capture; PhishDestroy score 56/100. 注册商: NiceNIC.

为保留原始取证记录，下方的 PhishDestroy AI 详细分析仍使用英文。

VirusTotal

2 det.

URLScan

报告 ↗

年龄

1 mo New

DestroyList

已列入

Source evidence

5 sources

VirusTotal

2 / 92

2026-10-13 11:23:56 UTC

报告

OTX

no community references

2026-10-13 11:24:14 UTC

报告

URLScan capture

存储的报告

报告

CF雷达

Report stored; verdict not recorded

报告

Google Safe Browsing

Checked; no threat flag recorded

2026-10-13 11:23:59 UTC

报告

网络安全情报 Registrar context

Registrar context NiceNIC

Stored registration data identifies NICENIC INTERNATIONAL GROUP CO., LIMITED (IANA 3765) as the registrar. PhishDestroy maintains separate NiceNIC abuse-report research; registrar association is contextual and is not an independent detection for this domain.

NiceNIC Verdict Full Investigation

证据摘要

Assessment

cardstrustwalletvcc.icu was internally listed by PhishDestroy on 2026-10-13, providing a dated catalogue entry for the domain. VirusTotal also recorded detections for this domain, adding another layer of technical context.

Recorded Evidence

PhishDestroy internally listed cardstrustwalletvcc.icu on 2026-10-13. VirusTotal checked the domain on 2026-10-11, recording 2 detections from 92 total scanners. The registration date for the domain was 2026-09-08 with NICENIC INTERNATIONAL GROUP CO., LIMITED. A PageSpeed performance score of 100 was measured on 2026-10-13.

Interpretation

PhishDestroy provides a record of cardstrustwalletvcc.icu in its internal listing, documenting its presence in a publisher-managed catalogue. VirusTotal measures how many external scanners detected the domain, offering a comparative technical reference. The PageSpeed score adds a performance metric from a specific date, broadening the scope of available evidence.

Recommended Actions

For cardstrustwalletvcc.icu, retain the PhishDestroy and VirusTotal records for ongoing reference. Compare these source entries with future observations to track any changes in technical or security-related findings.

探测与规避分析

隐身和流量分配检查

尚未扫描目前尚未记录到爬虫与浏览器之间的差异

针对该主机的爬虫与浏览器观察记录，以及针对“Keitaro”式流量分配系统的实时指纹检测。

存储的隐身标志: 尚未扫描
捕获路由: Local 存档于 2026-10-13 13:23:41 UTC

TDS指纹识别实时演示

七个Keitaro指纹，外加爬虫与浏览器的对比，当此面板打开时，由PhishDestroy扫描器运行。

等待

已保存的截图 · 1 capture

Screenshot of cardstrustwalletvcc.icu — **Primary capture**2026-10-13 11:22 UTC 1 / 1

来源Primary capture

Recorded2026-10-13 11:22 UTC

StateStored capture

HTTP status at archiveHTTP 403

Final URLhttps://cardstrustwalletvcc.icu/

Position1 / 1

Open capture Wayback 下载

Domain details

域名

IP Context Cloudflare shared edge origin IP hidden Edge-IP 声誉不属于此域。

注册商 NiceNIC

(RU) PhishDestroy Investigation

ICANN 注册管理机构ICANN Lookup (RDAP) →

WHOIS查询cardstrustwalletvcc.icu 的 ICANN RDAP →

注册信息创建 2026年9月8日 (34d · New)

技术详情Provenance & timestamps

首次发现2026年10月13日

Submitted URLhttps://cardstrustwalletvcc.icu/

SHORTDOT 域名区 · 公开证据 .icu

ShortDot zone evidence

The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.

ShortDot SA · Luxembourg 7 个域名区 · 全区证据每日更新打开 ShortDot 证据库

ICANN OVERSIGHT

认证和 RAA 背景

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

认证是一纸合同，不是安全印章。核实 ICANN 费用阅读 RAA §3.18 PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight

Accountability draft 不会自动发送任何内容。

Network & certificates

Stored technical evidence

Network & DNS

Shared CDN edge

Resolved IP: 188.114.96.1

Edge-IP 声誉不属于此域。

Location describes the IP network.

viewdns.info · 188.114.96.1 rapiddns.io

Latest Classified Outcome 2026-10-13 11:29:26 UTC

Primary outcome 未知 reason: Stale Current Evidence 0% confidence

Attribution source: Current State Backfill

Evidence layers Availability: Unknown Content: Unknown DNS: Stale Registration: Unknown

RDAP registration 未知

Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.

举报此域名提交证据，帮助保护他人

VirusTotal 分析

2 / 92 安全供应商标记了该域

View on VT

Last analyzed 2026-10-13 11:23:56 UTC

alphaMountain.ai

Fortinet

网站性能分析

Google PageSpeed Insights — mobile performance audit of cardstrustwalletvcc.icu · checked Oct 13, 2026

100

Good

Performance

FCP

0.78s

First Contentful Paint

LCP

0.78s

Largest Contentful Paint

CLS

Cumulative Layout Shift

TBT

0ms

Total Blocking Time

0.78s

Speed Index

Stored Capture Evidence 1 snapshot

Timestamped response metadata retained by the local collection pipeline. Each value below belongs to the displayed archive time.

Archived HTTP response HTTP 403

Requested URL: https://cardstrustwalletvcc.icu/

Just a moment...

响应
HTTP 403

HTML body
5.6 KB

Compressed
3.3 KB

Links
0 internal · 0 external

Detected technologies

cloudflare

Selected response headers

Content-Type: text/html; charset=UTF-8

CF-Mitigated: challenge

Server: cloudflare

Content-Encoding: gzip

Security headers present

Content-Security-PolicyX-Frame-OptionsX-Content-Type-OptionsReferrer-PolicyPermissions-PolicyCross-Origin-Opener-PolicyCross-Origin-Resource-Policy

HSTS: not observed DNSSEC: not observed WAF / firewall: observed Cloaking flag: not observed

Saved response-header values · 23

Accept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model,
alt-svc: h3=":443"; ma=86400
Cf-Mitigated: challenge
CF-RAY: a49df930598c57e6-GRU
Connection: close
Content-Encoding: gzip
Content-Security-Policy: default-src 'none'; script-src 'nonce-vXgsElYG4aJYvBIUdnqnoo' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blo
Content-Type: text/html; charset=UTF-8
Critical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model,
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Tue, 13 Oct 2026 11:23:38 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*
Referrer-Policy: same-origin
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=glpuNJaVt1IXXRxFyutCuXR3v6PIYB8DsbSQYw7%2FQraMddy6yCMF9A2LSNe1%2Fo2gEw1U%2BMfOqZ2D9jW0rfG5L95O9r67YHxBhSdeBp%2B7ta%2BW%2F9ALlXw%2FYo6vAYEhAkEz8
Server: cloudflare
Server-Timing: chlray;desc="a49df930598c57e6"
Transfer-Encoding: chunked
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN

Values retained by the collector; long values may be shortened during collection.

Forensic History & Detection Timeline

ThreatLifecycleTelemetry

This timeline displays historical security and status checkpoints observed by the PhishDestroy automated monitoring network. It records domain lifecycle updates, scanner changes, and threat telemetry over time.

Threat First Observed 2026-10-13 11:23:51 UTC

Domain ingestion complete. Initial state is marked as unknown pointing to IP 188.114.96.1.

威胁响应 Pipeline

发现

Analysis

Monitoring

8 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.

已捕获威胁

cardstrustwalletvcc.icu 已检测到并排入队，待进行全面分析

2026年10月13日

URLScan.io Capture

已存储 URLScan report with capture artifacts

Cloudflare Radar Report

A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.

VirusTotal

2/92 recorded on VirusTotal

2026年10月13日

Registrar Context: NiceNIC

Separate registrar research is available. Registrar association is contextual and is not scored as an independent detection.

Brand Impersonation

Impersonation of Trust Wallet

Forensic Evidence Collected

Stored evidence from URLScan.io, stored screenshot

DestroyList 已发布

Listed in the public PhishDestroy/DestroyList repository

2026年10月13日

How we investigate & report

Public scans, evidence and abuse channels

We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.

01Public scans & evidence collection10 sources and tool groups

urlscan.io Screenshot · DOM · HTTP

Capture the rendered page, requests and visible infrastructure.

VirusTotal Multi-engine verdicts

Compare the available engine results and retain the analysis timestamp.

Google Safe Browsing Transparency Report

Check whether Google currently lists the URL as unsafe.

Cloudflare Radar DNS · certificates · categories

Inspect a public scan and its recorded network and classification data.

AlienVault OTX Threat-intelligence pulses

Look for indicator references and related community intelligence.

互联网档案馆 Historical evidence

Compare archived captures and preserve historical context.

abuse.ch ThreatFox IOC correlation

Look for matching indicators and associated threat records.

crt.sh Certificate Transparency

Inspect certificate records and related hostnames.

DNS Security Filters Quad9 · AdGuard · CleanBrowsing

Compare security resolver responses and record observed blocking.

Web-Check Surface inspection

Inspect the public DNS, TLS, HTTP and technology surface.

02Abuse reports & follow-upRegistrar, hosting and security channels

Identify the responsible provider. Match registration and hosting records to the relevant abuse contact.
Prepare an evidence package. Include the URL, public scan references, captures and the recorded observations.
Send the report. Keep outgoing report records and recipient information when available.
Recheck and publish updates. Track later scanner verdicts, provider responses and site availability.

Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.

GoogleSafe Browsing GoogleWeb Risk MicrosoftSmartScreen VirusTotalURL analysis CloudflareRadar / abuse reporting YandexSafe Browsing URLScan.ioPublic scan ESETSample / URL submission BitdefenderURL submission NortonSafe Web Symantec网站评审 AviraURL reporting Avast / AVGURL reporting 卡巴斯基OpenTIP Dr.WebOnline scanner NetcraftAbuse reporting PhishTankCommunity reporting APWG eCXPhishing intelligence PhishStatsPublic feed Phish.ReportHosting abuse SpamhausDomain reputation PolySwarmMulti-engine analysis CheckPhishURL scan QutteraMalware scan URLqueryBrowser analysis Criminal IPAsset intelligence CRDFThreat Center ScamadviserReputation check MyWOTCommunity reputation

仿冒域名

已存储 104 个仿冒域名

trustwallst.com replacement 内部报告 trustwallzt.com replacement 内部报告 trustgallet.com bitsquatting 内部报告 trustwallet3.com addition 内部报告 trustwallet7.com addition 内部报告 trustwalletn.com addition 内部报告 trustwalletz.com addition 内部报告 trustwcllet.com bitsquatting 内部报告 trustwsallet.com insertion 内部报告 trustwxallet.com insertion 内部报告 xn--trustwalle-b22e.com homoglyph 内部报告 grustwallet.com replacement

显示全部（88）

t.rustwallet.com subdomain trastwallet.com vowel-swap trostwallet.com vowel-swap trsutwallet.com transposition trusfwallet.com replacement trusrwallet.com replacement trusstwallet.com plural trusttwallet.com repetition trustw.allet.com subdomain trustwa.llet.com subdomain trustwaklet.com replacement trustwalelt.com transposition trustwalket.com replacement trustwall3t.com replacement trustwalleet.com repetition trustwallef.com replacement trustwaller.com replacement trustwallit.com vowel-swap trustwalllet.com repetition trustwallot.com vowel-swap trustwallte.com transposition trustwlalet.com transposition trustwollet.com vowel-swap trustwullet.com vowel-swap trustwwllet.com replacement trustwzllet.com replacement trutswallet.com transposition truustwallet.com repetition trystwallet.com replacement turstwallet.com transposition rustwallet.com omission trestwallet.com bitsquatting trrustwallet.com insertion tructwallet.com bitsquatting truestwallet.com insertion truhstwallet.com insertion truistwallet.com insertion trusdtwallet.com insertion trusdwallet.com bitsquatting trust-wallet.com hyphenation trust2wallet.com insertion trustewallet.com insertion trustqwallet.com insertion trustrwallet.com insertion trustswallet.com insertion trustuallet.com bitsquatting trustvallet.com bitsquatting trustwa11et.com homoglyph trustwa1let.com homoglyph trustwaallet.com insertion trustwaiiet.com homoglyph trustwailet.com homoglyph trustwal1et.com homoglyph trustwalet.com omission trustwaliet.com homoglyph trustwallat.com bitsquatting trustwalldt.com bitsquatting trustwalle.com omission trustwallet0.com addition trustwallet4.com addition trustwallet5.com addition trustwallet6.com addition trustwalleta.com addition trustwalleth.com addition trustwalletj.com addition trustwalletk.com addition trustwalletr.com addition trustwallets.com addition trustwallett.com addition trustwalletx.com addition trustwallgt.com bitsquatting trustwallmt.com bitsquatting trustwallt.com omission trustwaqllet.com insertion trustwawllet.com insertion trustwellet.com bitsquatting trustwwallet.com insertion trustwzallet.com insertion trustywallet.com insertion truswallet.com omission trvstwallet.com homoglyph ttrustwallet.com insertion xn--trstwallet-beb.com homoglyph xn--trstwallt-i4a6r.com homoglyph xn--trustwalet-6yb.com homoglyph xn--trustwalet-toe.com homoglyph xn--trustwalle-5cc.com homoglyph xn--trustwallt-j7a.com homoglyph

显示 104 个中的 100 个

证据与外部报告

证券分析

URLScan Stored capture VirusTotal 2 det. ChainPatrol URLQuery SSL 实验室 CF雷达打开报告 WOT ScamAdviser 黑名单检查器 URLVoid Sucuri SiteCheck MDN 观测站

OSINT与情报分析

Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox 哈德逊岩 Sign-in search IntelX crt.sh 证书 WHOIS Wayback

DNS 与网络

nslookup.io DNS bgp.tools ASN /路线

SEO 与域名

SpyFu Moz DA/PA Ahrefs 反向链接

深度分析

您是否受到本网站的影响？

3 evidence signal groups linked 0 reports recorded 未验证

If credentials were compromised, report immediately. Do not engage with recovery scammers.

如果您输入了帐户凭据、个人或付款信息，或者从此域下载了文件，请立即采取措施。以下资源可帮助您报告事件并保护自己。

联邦调查局（FBI）IC3

报告美国的互联网犯罪

Federal tips line1-800-CALL-FBI

欧洲刑警组织

查找您所在欧盟国家/地区的官方报告渠道

National police directory

“Action Fraud”

举报英格兰、威尔士和北爱尔兰的欺诈和网络犯罪

Contact centre0300 123 2040

PhishDestroy listing review 不是执法报告

域名申诉

如果您拥有该域名并认为该列表不正确，请请求审核

警惕“数据恢复”诈骗！ 犯罪分子可能会冒充调查员、律师或追债员再次联系受害者。 请勿支付预付费用或共享凭证。 了解有关康复欺诈的更多信息 →

向当地主管部门报告

选择您所在的国家/地区以获取 官方网络犯罪联系人 或创建投诉草稿 →。

97个国家目录

Template-based draft · optional AI wording assistance requires separate consent

AI辅助草稿——事件详细信息由AI提供商处理 · 自行审核并提交

随时掌握最新信息，确保安全

请实时监控威胁，或者如果您认为这是误报，请对该条目提出异议

实时威胁动态对该列表提出异议

HTML · IFRAME

嵌入此报告

在您的网站或博客上分享此威胁情报

embed.html

<iframe
  src="https://phishdestroy.io/zh/embed/domain/cardstrustwalletvcc.icu"
  title="PhishDestroy threat report for cardstrustwalletvcc.icu"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

cardstrustwalletvcc.icu

Source evidence

VirusTotal

OTX

URLScan capture

CF雷达

Google Safe Browsing

证据摘要

Assessment

Recorded Evidence

Interpretation

Recommended Actions

隐身和流量分配检查

已保存的截图 · 1 capture

Domain details

ShortDot zone evidence

认证和 RAA 背景

Registrar accreditation and DNS abuse obligations

Network & certificates

Network & DNS

Latest Classified Outcome 2026-10-13 11:29:26 UTC

VirusTotal 分析

Forensic History & Detection Timeline

威胁响应 Pipeline

Public scans, evidence and abuse channels

仿冒域名

证据与外部报告

您是否受到本网站的影响？

向当地主管部门报告

检查任意域名

举报网络钓鱼

实时威胁动态

随时掌握最新信息，确保安全

嵌入此报告

cardstrustwalletvcc.icu

Source evidence

VirusTotal

OTX

URLScan capture

CF雷达

Google Safe Browsing

证据摘要

Assessment

Recorded Evidence

Interpretation

Recommended Actions

隐身和流量分配检查

已保存的截图 · 1 capture

Domain details

ShortDot zone evidence

认证和 RAA 背景

Registrar accreditation and DNS abuse obligations

Network & certificates

Latest Classified Outcome 2026-10-13 11:29:26 UTC

VirusTotal 分析

Forensic History & Detection Timeline

威胁响应 Pipeline

Public scans, evidence and abuse channels

仿冒域名

证据与外部报告

您是否受到本网站的影响？

向当地主管部门报告

相关基础设施与报告

关于共享 Cloudflare 边缘的其他报告 6

同一注册商: NiceNIC 6

最近的威胁报告 5

检查任意域名

举报网络钓鱼

实时威胁动态

随时掌握最新信息，确保安全