trustpay[.]zip
“Your Private Crypto Card”
साक्ष्य सारांश
The domain trustpay.zip was registered on 21 February 2026 through the Globconnex registrar and is hosted on a Cloudflare name server pair (houston.ns.cloudflare.com, nora.ns.cloudflare.com). DNS resolution points to the IPv4 address 147.45.220.184, which belongs to AS215540 (GLOBAL CONNECTIVITY SOLUTIONS LLP) located in Japan. No TLS certificate is presented, indicating that the site is served over plain HTTP only. The page title returned by the live endpoint before takedown was “Your Private Crypto Card”, and the domain is explicitly associated with a crypto‑scam campaign that impersonates the Trust Wallet brand. VirusTotal has recorded 16 detections out of 93 scanned security vendors, confirming that multiple commercial scanners flag the domain as malicious.
The domain appears on a single public blocklist and has been taken offline by the PhishDestroy mitigation service. The current HTTP status is unavailable because the site is offline, and no further content analysis is possible. Evidence indicates that the operator leveraged a brand‑impersonation technique to lure cryptocurrency users, likely by promising a private crypto card. The lack of SSL, the recent registration date, and the use of Cloudflare DNS are consistent with a fast‑flux or throwaway infrastructure typical of opportunistic crypto scams.
At this time, the full payload or credential‑harvesting mechanism cannot be confirmed due to the site’s offline state. Defenders should continue to block trustpay.zip at DNS and proxy layers, monitor for any resurgence of the same IP address or associated Cloudflare name servers, and add the domain to internal blacklist feeds. Threat‑intel teams should correlate the AS215540 IP range with other observed crypto‑scam activity and consider sharing the detection count and page‑title indicator with industry sharing platforms. Ongoing observation of the registrar Globconnex for new registrations that reuse similar naming patterns is also recommended.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260219-3D5CF7- कैप्चर किए गए पेज का शीर्षक
- Your Private Crypto Card
- PDF दस्तावेज़
- PDF प्रमाण
प्रमाण का पूरा पाठ
Acceptable Use Policy (AUP): The domain trustpay.zip is actively engaged in phishing activities, which constitutes a clear violation of your AUP that prohibits illegal activities, fraud, and deception.
Terms of Service (TOS): The continued operation of this domain directly contravenes your TOS, which reserves the right to suspend or terminate services for violations related to fraudulent activities.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. federal law prohibits unauthorized access to computers and the use of fraudulent schemes to obtain information, which applies to phishing activities.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud others through electronic communications, which is relevant to the phishing activities associated with this domain.
CAN-SPAM Act (15 U.S.C. § 7701): This act regulates commercial email and prohibits deceptive practices in electronic communications, which are evident in the operations of trustpay.zip.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to legal liability and regulatory scrutiny. It is imperative to comply with your AUP and TOS to mitigate potential risks.
Data Coverage
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | trustpay.zip |
phishing | Phishing Block |
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 11/08/2026
पहचान समयरेखा
-
Cloudflare Radar
Cloudflare Radar स्कैन संग्रहीत · स्कैन खोलें
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
वायरसटोटल विश्लेषण
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।