io-trast[.]pages[.]dev
Análisis de phishing y seguridad de io-trast.pages.dev
“How to Use Trust Wallet: Guide to Crypto”
io-trast.pages.dev — Accesible · acceso restringido (HTTP 403). Suplantación de marca: Trust Wallet; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 4/94 (ChainPatrol, alphaMountain.ai, LevelBlue, Phishing Database); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 71/100. Registrador: Cloudflare.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis of the domain io-trast.pages.dev, created on March 22, 2026, shows a clear pattern of brand impersonation targeting Trust Wallet. The site served a page titled “How to Use Trust Wallet: Guide to Crypto,” which aligns with the declared crypto‑scam classification. Technical profiling indicates the domain is hosted behind Cloudflare’s network (nameservers adaline.ns.cloudflare.com and dimitris.ns.cloudflare.com) and resolves to IP address 188.114.97.3, an address owned by Cloudflare, Inc. in Canada.
The TLS certificate is issued by Google Trust Services under the WE1 root, confirming the use of a legitimate certificate authority, while HTTP/3 and HSTS are enabled, suggesting an effort to mimic legitimate services. VirusTotal scans returned four positive detections out of ninety‑four vendors, and the domain appears on three external blocklists, with active takedown actions reported by PhishDestroy, MetaMask, and SEAL. The site currently returns HTTP 403 and has been taken offline, but historical evidence indicates it was used to lure users into a Trust Wallet‑related cryptocurrency guide, a typical vector for credential harvesting or fund diversion.
Gridinsoft’s trust score of 0 / 100 further underscores the malicious nature of the infrastructure. Defenders should continue to block the IP 188.114.97.3 and the domain at the DNS level, update intrusion‑prevention signatures to include the observed page title and the specific Cloudflare nameserver pair, and monitor for newly registered domains that resolve to the same Cloudflare IP range with similar Trust Wallet‑related titles. Given the brand impersonation, threat intelligence feeds should flag any future attempts to replicate this pattern, and user‑education campaigns should remind Trust Wallet users that official guidance is delivered only through verified channels.
Inteligencia de seguridad de red
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Inteligencia forense
Tecnologías · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of io-trast.pages.dev · checked Mar 21, 2026
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.