ChainPatrol
Web-Check 
SOCRadar 
LeakIX 
IC3 del FBI
Denunciar delitos cometidos a través de Internet en los Estados Unidos
Federal tips line1-800-CALL-FBI
MALICIOUS — CRITICAL
trustwlallet[.]com
The domain trustwlallet.com was registered on April 26, 2025 through West263 International Limited and is currently taken offline.
95/100 evidence score · Critical
- VirusTotal
- 15/93
- Blocklists
- 2 · MetaMask, SEAL
- Disponibilidad
- No verificado
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
Resumen del informe
trustwlallet.com — No verificado. Suplantación de marca: Trust Wallet; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 15/93 (alphaMountain.ai, BitDefender, CyRadar, ESET, Emsisoft); URLQuery 4 alerts; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 95/100. Registrador: West263 International.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Evidence Analysis
The domain trustwlallet.com was registered on April 26, 2025 through West263 International Limited and is currently taken offline. During its active period it resolved to the IP address 156.243.14.61, which belongs to ASN 40065 (CNSERVERS LLC) and is geolocated in Hong Kong. The hosting infrastructure employed Nginx and supported modern protocols including HTTP/3 and HSTS, indicating an attempt to present a legitimate‑looking service. The site presented the page title "TrustWallet官方app下载_TrustWallet钱包下载_TrustWallet安卓版下载_TrustWallet官网-全球领先的数字货币交易钱包," directly referencing the Trust Wallet brand and positioning the domain as a crypto‑related download portal.
Security vendors have flagged the domain with a detection count of 15 out of 93 on VirusTotal, and it appears on three public blocklists. It has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the assessment that the domain was used for a crypto‑scam impersonating Trust Wallet. The SSL certificate was issued by TrustAsia Technologies, Inc. under the LiteSSL RSA CA 2025, which does not provide any brand‑specific validation and is consistent with many malicious deployments.
Reputation metrics are extremely poor: Gridinsoft assigned a trust score of 0 out of 100. The domain’s nameservers are ns1.myhostadmin.net, ns2.myhostadmin.net, ns3.myhostadmin.net, and ns4.myhos, reflecting a typical configuration for disposable hosting. The combination of brand impersonation, low trust score, multiple blocklist listings, and vendor detections classifies the threat as high risk.
Defenders should ensure that trustwlallet.com is added to local and network‑level blocklists, monitor the associated IP address 156.243.14.61 for any reactivation, and watch for future registrations from the same registrar or nameserver set. Given the use of modern web technologies, intrusion detection systems should be configured to inspect TLS traffic for the LiteSSL RSA CA 2025 certificate fingerprint.
VirusTotal
15 det.
URLQuery
4 threat alerts
CF Radar
Malicioso
URLScan
Certificado TLS
Caducado o no verificado -69d
Edad
1.3 yr
Estado observado
No verificado
DestroyList
En lista
Cobertura de los datos12 recorded checks
VirusTotal
15 / 93
URLQuery
4 threat-system alerts
PhishStats
checked — no match recorded
OTX
no community references
CF Radar
provider verdict: malicious
URLScan capture
informe almacenado
URLScan verdict
Análisis finalizado
Bloqueos de DNS
no comprobado
TLS
Caducado o no verificado
WHOIS
16 mo old
Captura de pantalla
3 captures · 3 sources
Cadena de redireccionamientos
no sondeado
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | trustwlallet.com |
malicious | Sinkholed |
| DNS0 Zero | trustwlallet.com |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | trustwlallet.com |
malicious | Sinkholed |
| DigiCert UltraDNS | trustwlallet.com |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Descubrimiento
Checks
Reports
Disponibilidad
13/15
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Dominio
URLScan Verdict
Análisis finalizado
score 0 report ↗
Servidor / ASN
nginx · AS40065 CNSERVERS, US
Reputación de IP
abuse score 0/100 0 reports checked 27/07/2026
Registrador
West263 International
(HK)
(HK)
Dirección IP
156.243.14.61
RegistroCreado 26/04/2025
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
Primera detección26/02/2026
DOM Analysisanalyzed 27/07/2026score 0/100
IoC Extractionscanned 29/07/20260 wallet · 0 Telegram IoCs
Servidores de nombresns6.myhostadmin.net
TLS Fingerprint
TLS Observationvalid from 03/03/2026scanned 15/03/2026
TLS SAN Domainsatrsutwallet.comctrsutwallet.comdtrsutwallet.cometrsutwallet.comftrsutwallet.comgtrsutwallet.comhtrsutwallet.comitrsutwallet.comjtrsutwallet.comktrsutwallet.comltrsutwallet.comotrsutwallet.comptrsutwallet.comqtrsutwallet.comrtrsutwallet.com+84
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
La acreditación es un contrato, no un sello de seguridad.
Verificar las tasas de ICANN
Leer el RAA §3.18
PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Tecnologías · 5 identified
N
Nginx
Web servers
Reverse proxies
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100 % de confianza
S
Swiper
JavaScript libraries
Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.
swiperjs.com 100 % de confianza
J
jQuery
JavaScript libraries
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 100 % de confianza
H
HSTS
Seguridad
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100 % de confianza
H
HTTP/3
Miscellaneous
HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100 % de confianza
Detected via Cloudflare Radar · Wappalyzer engine
Denunciar este dominio
Envía pruebas y ayuda a proteger a los demás
Análisis de VirusTotal
15 / Los proveedores de seguridad de 93 marcaron este dominio
View on VT
Last analyzed
alphaMountain.ai
BitDefender
CyRadar
ESET
Emsisoft
Forcepoint ThreatSeeker
Fortinet
G-Data
Lionic
Netcraft
Seclookup
SOCRadar
Sophos
VIPRE
Webroot
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of trustwlallet.com · checked Mar 2, 2026
77
Needs Work
Performance
FCP
2.15s
First Contentful Paint
LCP
3.72s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
0ms
Total Blocking Time
SI
15.93s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Datos y informes externosIndependent lookups and source reports
Análisis de seguridad
OSINT e inteligencia
DNS y redes
SEO y dominios
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Action Fraud
Denunciar fraudes y delitos cibernéticos en Inglaterra, Gales e Irlanda del Norte
Contact centre0300 123 2040
PhishDestroy listing review No es un informe policial
Recurso sobre el dominio
Solicite una revisión si es propietario de este dominio y cree que el listado es incorrecto
¡Cuidado con los estafadores que se hacen pasar por empresas de recuperación de datos! Los delincuentes pueden volver a contactar a las víctimas haciéndose pasar por investigadores, abogados o agentes de recuperación. No pague tarifas por adelantado ni comparta credenciales. Más información sobre el fraude en las ayudas de recuperación →
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
directorio de 97 países
Borrador asistido por IA: el proveedor de IA procesa los detalles del incidente
Revíselo y envíelo usted mismo
Infraestructura e informes relacionadosStored relationships and adjacent records
Mismo registrador: West263 International 6
pluma777-app.com Trust Wallet impersonation 8
These domains also target Trust Wallet users. View all Trust Wallet threats →
Informes de amenazas recientes 6
Informes agregados recientemente de la base de datos PhishDestroy. Estos enlaces de descubrimiento no implican infraestructura ni propiedad compartida.
lizsbs.shop 