Phishing detection: trustwallet.42web.io

Trust Wallet
http://trustwallet.42web.io Access site
Screenshot
Screenshot of trustwallet.42web.io
Investigate
Domain trustwallet.42web.io
urlscan page.domain VirusTotal Whois
IP 185.27.134.171
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://trustwallet.42web.io
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
29 low suspicionheuristic risk score · not a probability
Keyword matchBrand in subdomainGoogle Safe Browsing
15 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

A Trust Wallet impersonation hosted on a free-hosting subdomain (42web.io), flagged by Google Safe Browsing as social engineering and by TweetFeed as malicious. Login keywords are present in the page text, indicating it is designed to harvest crypto wallet credentials.

Google Safe BrowsingTweetFeedBrand in subdomain
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-16 · confidence 82%
Domain & Network
Whois
Network
IP 185.27.134.171
Country United KingdomUnited Kingdom
Hosting Wildcard UK Limited
ASN AS34119
TLS Cert -
External detection Google Safe Browsing TweetFeed
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · urlscan.io
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-08-15 22:04 UTC  ·  Last refreshed 2026-08-17 01:30 UTC