trustwalletcard[.]in
“Trust Wallet - Crypto Card”
trustwalletcard.in — Contenido no disponible (HTTP 502). Suplantación de marca: Ethereum; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 4/93 (Fortinet, Gridinsoft, SOCRadar, URLQuery); URLQuery 6 alerts; Spamhaus DBL_PHISH; 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 74/100. Registrador: Web Commerce Communica….
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain trustwalletcard.in was registered on February 21, 2026 through Web Commerce Communications Limited and is hosted on Cloudflare infrastructure, resolving to IP address 104.21.56.96 located in the United States under ASN 13335 (Cloudflare, Inc.). The authoritative nameservers are bryce.ns.cloudflare.com and elinore.ns.cloudflare.com. No TLS certificate is presented for the domain, indicating that connections are served without encryption. The site’s page title, "Trust Wallet - Crypto Card," and the listed brand target of Ethereum suggest an attempt to impersonate the Trust Wallet brand and the broader Ethereum ecosystem.
Threat intelligence classifies the activity as a crypto scam, and the domain appears on four independent security blocklists. Multiple anti‑phishing services—including PhishDestroy, MetaMask, ScamSniffer, and SEAL—have identified and blocked the site. VirusTotal analysis reports four positive detections out of ninety‑three scanners, reinforcing the malicious classification. Gridinsoft assigns a trust score of zero out of one hundred, reflecting extreme risk.
The current operational status is offline, and the risk level is elevated. While the page content has not been captured due to the offline state, the combination of registrar information, hosting details, lack of SSL, brand impersonation cues, and multiple vendor detections provides sufficient evidence to treat trustwalletcard.in as a confirmed malicious infrastructure component. Defenders should enforce network‑level blocking of the domain and its resolved IP, monitor for any resurgence, and incorporate the domain into threat‑intel feeds to prevent credential harvesting or crypto‑related fraud attempts.
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Nextron YARA rules | trustwalletcard.in/assets/index-bakr55ut.js |
malware | Unique code from Jetriz, Swid & Jeniva of the Tetris framework |
| Nextron YARA rules | trustwalletcard.in/assets/index-te6_j_jh.js |
malware | Unique code from Jetriz, Swid & Jeniva of the Tetris framework |
| Quad9 DNS | evmevmevmecmecm.icu |
malicious | Sinkholed |
| DNS4EU | evmevmevmecmecm.icu |
malicious | Sinkholed |
| Hagezi Threat Feed | evmevmevmecmecm.icu |
malicious | Sinkholed |
| DigiCert UltraDNS | tonapi.io |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Inteligencia forense
Análisis de VirusTotal
Datos y informes externos
PD-20260211-C77755 Recipient: compliance_abuse@webnic.cc ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.