trustwallet[.]rpcnetwork[.]io
“Trust Wallet”
Résumé des preuves
Analysis of trustwallet.rpcnetwork.io shows the domain was registered on 21 February 2026 through Hostinger operations UAB and is hosted on the IP address 185.28.21.242, which belongs to AS47583 Hostinger International Limited in the United States. The site resolves to a server without an SSL certificate and uses the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. The page title returned by the HTTP response is “Trust Wallet”, matching the targeted brand “trust wallet”. VirusTotal records indicate that two of ninety‑three scanning engines flagged the domain as malicious, and it appears on a single security blocklist.
Independent monitoring by PhishDestroy has also listed the domain as blocked, while Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious assessment. The domain is classified as a crypto‑scam impersonating the Trust Wallet brand. Current network checks show the domain is taken offline, but the underlying infrastructure remains reachable and could be re‑activated.
Defenders should continue to block the IP 185.28.21.242, add the domain to local deny lists, and monitor any future DNS changes or SSL deployment that may indicate a revival. Further investigation is limited by the lack of a live HTTP payload and the absence of additional telemetry such as URL paths or payload samples. Until the site is re‑hosted, the primary evidence consists of registration metadata, hosting attribution, the brand‑matching page title, and the low trust scores from multiple security products.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260215-8790DA- Titre de la page capturée
- Trust Wallet
- Artefact PDF
- Preuve PDF
Fondement juridique
Texte intégral des preuves
Section 3.1 of AUP: The domain trustwallet.rpcnetwork.io is engaged in phishing activities, which are explicitly prohibited under your Acceptable Use Policy.
Section 4.2 of TOS: The use of this domain for fraudulent purposes constitutes a violation of your Terms of Service, which reserves the right to suspend or terminate services for such actions.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA) - 18 U.S.C. § 1030: This federal law prohibits unauthorized access to computers and the use of such access to commit fraud.
Wire Fraud Statute - 18 U.S.C. § 1343: This law addresses fraudulent schemes that involve interstate or foreign communications, including those conducted via the internet.
CAN-SPAM Act - 15 U.S.C. § 7701: This act regulates commercial email and prohibits deceptive practices in electronic communications, including phishing.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to legal liability and regulatory scrutiny. Non-compliance with your own policies and applicable laws could result in severe penalties.
Data Coverage
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Nextron YARA rules | trustwallet.rpcnetwork.io/images/trust-wallet-1.3j3nz9y.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 11/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
Analyse forensique
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif