VirusTotal
3 / 93 engine detections
レポートを開く“Trust Wallet”
Trust Walletなりすまし: trustwallet.webrpc.network — コンテンツが利用できません. 証拠の概要: VirusTotal 3/93 (Forcepoint ThreatSeeker, SOCRadar, Webroot); PhishDestroy score 65/100.…
元のフォレンジック記録を保持するため、下の PhishDestroy AI 詳細分析は英語のままです。
3 / 93 engine detections
レポートを開くchecked — no detections recorded
レポートを開くno community references
レポートを開くprovider verdict: clean
レポートを開くNo threat flag
レポートを開くNo malicious flag
レポートを開くResults reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
PhishDestroy threat report
The domain trustwallet.webrpc.network was registered on 21 February 2026 through HOSTINGER operations, UAB and resolves to the IPv4 address 151.106.96.72, which belongs to AS47583 Hostinger International Limited and is geolocated in the United States. The site presented a page title of “Trust Wallet”, directly referencing the Trust Wallet brand, and is classified as a brand‑impersonation crypto‑scam. No TLS certificate was observed, indicating that the service was delivered over plain HTTP only. Automated analysis on VirusTotal recorded three positive detections out of ninety‑three scanners, and the domain is listed on a single public security blocklist that was also used by the PhishDestroy mitigation service, which has taken the site offline.
The Gridinsoft trust score is 0 out of 100, reinforcing the malicious assessment. Because the site is currently offline, active content cannot be inspected, and the exact phishing payload or credential‑harvesting mechanism remains unknown. Nevertheless, the combination of brand impersonation, the use of a free‑hosting provider, the lack of encryption, and the observed detections provide sufficient evidence for defenders to treat the domain as malicious.
Recommended mitigation steps include adding the domain and its associated IP address to network‑level deny lists, monitoring DNS queries for future re‑registration, and ensuring that endpoint protection solutions are updated to reflect the three VirusTotal detections. Continuous observation of the Hostinger infrastructure for similar patterns is advised, as the provider has been used in other cryptocurrency‑related abuse campaigns. Defenders should also educate users about unsolicited requests that reference Trust Wallet and enforce multi‑factor authentication for any wallet‑related services.
For the registrable domain webrpc.network behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Location describes the IP network.
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='trustwallet.webrpc.network', port=80): Max retries exceeded with url: / (Caused by NewConn
trustwallet.webrpc.network
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
dns_inactive
dns_nxdomain
https://radar.cloudflare.com/scan/126299a2-9482-4cc9-81bb-8f147ecd44e6
No threat flag
View source3/93 engine detections
View sourcePD-20260125-93CAC3
trustwallet.webrpc.network
View sourcePage captured
View source保存された類似ドメイン:104 件
104 件中 100 件を表示
コミュニティの 1 人が報告・初回確認 2026年1月24日
PD-20260125-93CAC3 Recipient: abuse@hostinger.com Registrar: Hostinger Operations UAB (Lithuania (EU)) Policy Violations: AUP prohibits illegal activity including fraud, phishing, malware hosting; Hostinger may suspend/terminate services and domains Applicable Laws: Lithuanian Criminal Code (Ch. XXX, §§196–198 data/system crimes; §§214–215 electronic fraud); EU Directive 2013/40/EU
アカウント資格情報、個人情報、支払い情報を入力した場合、またはこのドメインからファイルをダウンロードした場合は、すぐに対処してください。インシデントを報告し、自分自身を守るのに役立つリソースを以下に示します。
サイバー犯罪の公式連絡先 または 苦情草稿を作成する → を取得するには、国を選択してください。
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
trustwallet.webrpc.network)たとえすべての詳細がわかっていなくても―― とにかく報告を提出する. 不完全な情報であっても、捜査には役立つ。
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
保存されたブロックリスト、WHOIS、DNS、および公開スキャン証拠を使用した脅威分析
今すぐスキャン不審なドメインを当社の脅威データベースに報告してください — コミュニティを守りましょう
レポート最近のフィッシングレポートと観察された可用性の変化
監視リアルタイムの脅威を監視するか、誤検知だと思われる場合はこのリストに異議を申し立ててください
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.