tuco[.]co
“Круглосуточный обмен электронных валют «TUCO»”
tuco.co — 未验证. 证据摘要: VirusTotal 5/91 (alphaMountain.ai, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, SOCRadar); PhishDestroy score 88/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
PhishDestroy first observed tuco.co on Jul 27, 2026. The captured page title is “Круглосуточный обмен электронных валют «TUCO»”. Current evidence score: 88/100 (critical).
One source contains a positive finding: VirusTotal. VirusTotal recorded 5 detections among 91 engines: alphaMountain.ai, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, SOCRadar on Aug 13, 2026 at 06:28 UTC. Non-positive and contextual checks: AlienVault OTX listed 3 community pulse references (not vendor detections) on Aug 13, 2026 at 06:30 UTC. The separate external-blocklist snapshot contained no matches on Aug 30, 2026 at 22:20 UTC. Google Safe Browsing returned no flag on Aug 13, 2026 at 06:29 UTC.
The collector marked the hostname reachable on Aug 30, 2026 at 22:16 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 51.250.68.164 on AS200350 (Yandex.Cloud LLC). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. The evidence archive retains 1 visual capture from Cloudflare Radar. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Oct 15, 2026; checked Aug 11, 2026 at 13:02 UTC.
Stored content provides classification context, but only one source contains a positive finding. The stored fields do not identify an impersonated brand or victim interaction.
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
所用技术 · 8 identified
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.
aws.amazon.com 置信度 100%Yandex.Metrica is a free web analytics service that tracks and reports website traffic.
metrika.yandex.com 置信度 100%reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.
www.google.com 置信度 100%JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.
www.jivosite.com 置信度 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 置信度 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 置信度 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 置信度 100%Amazon Simple Email Service (SES) is an email service that enables developers to send mail from within any application.
aws.amazon.com 置信度 100%VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of tuco.co · checked Aug 11, 2026
证据与外部报告
“This is a coordinated "frozen order" exchange scam operated through a Telegram account named "Flowisland Support." The group poses as a cryptocurrency exchange service. Method of operation: After a victim sends crypto for a swap (SOL to TRX), the operators claim the order is "frozen" due to a fabricated network error — e.g. a "7th validator error" on Solana, or a claimed amount mismatch (5.55 vs 5.56 SOL). No such error exists; this is a pretext. They then demand the victim make a second ident”
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。