trustworldbank[.]sbs
“Trust worth Bank”
The domain trustworldbank.sbs hosted a fraudulent cryptocurrency site titled "Trust worth Bank," specifically impersonating the legitimate Trust Wallet brand to deceive users into connecting their wallets or providing private keys. This scam aims to steal cryptocurrency funds through credential harvesting or unauthorized transactions.
Technical analysis reveals the domain was flagged by 9 out of 95 VirusTotal vendors, with additional detection by Hunt.io Intelligence, Netcraft, and Webroot. It was registered through Dynadot LLC on 2026-03-20, resolving to IP 198.251.84.200 hosted by FranTech Solutions in Luxembourg. The site used an SSL certificate issued by Let's Encrypt (R13) and employed nameservers including ns5.asurahosting.com and ns6.my-control-panel.com. GridinSoft assigned a trust score of 0/100.
The domain is currently offline and has a DOM risk score of 63, indicating a high-risk profile. Despite being down, the infrastructure remains a potential threat for reactivation or similar scams.
Network Security Intelligence
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | trustworldbank.sbs |
malicious | Sinkholed |
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
SHORTDOT ZONE · PUBLIC EVIDENCE
.sbs
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 7 identified
Popular CSS framework for responsive, mobile-first web development.
High-performance web server compatible with Apache configurations.
Live chat and visitor recording tool for customer support.
Touch-enabled jQuery plugin for responsive carousel sliders.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of trustworldbank.sbs · checked Mar 22, 2026
Evidence & External Reports
PD-20260322-857519 Recipient: abuse@dynadot.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive