Is 2366xyx.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a Chinese-language promotional landing page for “TPWallet,” presenting a downloadable multi-chain cryptocurrency wallet with on-device key and seed-phrase storage, multi-signature functionality, DApp access, and links purporting to support major mobile-app platforms.

Scam/Impersonation Risk

The site presents a material sensitive-interaction risk. Its homepage combines a crypto-wallet download proposition with high-stakes security claims, including sole user control of private keys and seed phrases, cold-wallet and multi-signature capabilities, and broad support for assets and networks such as BTC, ETH, BSC, TRON, Aptos, Polygon, Solana, Cosmos, Polkadot, EOS, IOST, and USDT. It also displays unverified counters claiming 2,000,000 users, 3,000,000 daily transactions, coverage across 200 countries and regions, and 50,000,000 in daily transaction volume; the available page evidence does not substantiate these claims. Independent reputation evidence records a confirmed blacklist and multiple malicious detections, including coverage from Fortinet, Kaspersky, and Sophos. No identity contradiction between distinct legal entities was observed, but the reputation findings are sufficient to make credential submission, application installation, wallet connection, or financial activity inappropriate. Evidence:

• The homepage advertises the TPWallet application, download links, multi-chain asset management, on-device key storage, multi-signature protection, and DApp access.
• The homepage displays the stated user, transaction, geographic-coverage, and transaction-volume counters without supporting evidence.
• External reputation telemetry records 17 malicious detections, 0 suspicious detections, and a confirmed blacklist.
• The domain registration record shows creation on 2023-11-13 and a reported age of 2.76 years; archival coverage contains 17 snapshots spanning 2021–2026, with 6 years tracked.

Regulatory Verification Notes

The available landing-page content does not identify a licensing authority, registration number, or clearly named operating entity. That is a regulatory and disclosure gap requiring independent verification, rather than standalone proof of fraud. The site’s apparent wallet and digital-asset functionality creates a need to establish which entity operates the service and whether any applicable authorization exists before engagement. Its independently unverified identity further prevents the on-site branding and security assertions from being treated as proof of a real-world operator. Evidence:

• The homepage presents a digital-asset wallet service but contains no stated license claim, license number, or regulatory authority.
• The site’s transport encryption is a DV certificate issued by YR1, valid to 2026-09-27T07:31:26+00:00.
• Hosting telemetry identifies AS54801 operated by ZILLION-NETWORK - Zillion Network Inc., US.
• The domain registrar is GoDaddy.com, LLC, with an expiration date of 2026-11-13T19:30:04Z.

What to Verify Next

Any prospective assessment should first obtain the official publisher identity for the application and independently compare it with the publisher shown in the relevant official app-store listing. Applicable digital-asset licensing or registration should be checked directly with the competent registry using the operator’s legal name, not links or claims supplied by the site. Contact channels should be confirmed through an independently sourced route, and no credentials, recovery phrases, private keys, payment details, or wallet authorizations should be entered while those checks remain unresolved. Evidence:

• The homepage’s high-stakes security and usage claims require confirmation from independently attributable documentation.
• The absence of a stated licensing authority or registration number makes direct registry verification necessary.
• The confirmed external reputation findings require validation of the application publisher and distribution channel before installation.

Summary Verdict

The website has a critical trust posture for sensitive interaction. The combination of confirmed external threat detections, an unverified operator identity, and unsupported high-stakes claims means the site should not be treated as an established or dependable service for credentials, wallet access, or financial activity.

Infrastructure Integrity

The site resolves to a single likely origin IP, with no CDN edge or detected WAF vendor providing an additional separation layer. This infrastructure configuration does not itself establish malicious intent, but it offers limited protective mitigation against the reputation concerns identified above.

Closing Assessment

The proportionate course is to refrain from installation and sensitive interaction unless the application publisher, operator identity, applicable authorization, and distribution channel are independently confirmed through trusted sources.