trusted-wallet[.]info
“Index of /”
Résumé des preuves
The domain trusted-wallet.info was registered on February 27, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently taken offline. DNS resolution points to the IPv4 address 85.206.175.144, which belongs to the Lithuanian autonomous system AS61272 (Informacines sistemos ir technologijos, UAB). The domain is served by four nameservers—dns1.bacloud.com, dns2.bacloud.com, dns1.laisvas.lt, and dns2.laisvas.lt—indicating a distributed hosting configuration that spans at least two distinct provider networks. No TLS certificate is presented, meaning all HTTP traffic would be unencrypted if the site were reachable.
The sole page title returned by the web server is "Index of /," providing no functional context and suggesting a placeholder or directory listing rather than a crafted phishing interface. Security tooling has flagged the domain on three independent blocklists and it is explicitly blocked by the PhishDestroy, MetaMask, and SEAL filters, all of which target malicious cryptocurrency‑related activity. VirusTotal analysis shows that two out of ninety‑five antivirus engines have flagged the domain, reinforcing the suspicion of malicious intent. The threat type is catalogued as a crypto drainer, a class of operation that typically lures victims into sending cryptocurrency to attacker‑controlled wallets.
While the offline status precludes real‑time interaction, the infrastructure elements—Lithuanian hosting, publicly listed nameservers, lack of SSL, and the presence on multiple anti‑phishing lists—are consistent with known crypto‑draining campaigns. Defenders should continue to monitor the IP address 85.206.175.144 for any reactivation, enforce outbound transaction controls to block communications with this host, and ensure that endpoint protection solutions reference the latest blocklist entries.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260227-F6212A- Titre de la page capturée
- Index of /
- Artefact PDF
- Preuve PDF
Texte intégral des preuves
Policy Violations: Explicit policy to immediately suspend domains used for phishing, 419 scams, identity fraud, malware distribution without prior notice
Applicable Laws: IT Act 2000 §§66C–66D (identity theft, cheating by personation), Indian Penal Code §420 / Bharatiya Nyaya Sanhita §318 (fraud)
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 13/08/2026
8 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif