app[.]trustwirebank[.]click

The domain app.trustwirebank.click was registered on August 03, 2025 through OwnRegistrar, Inc. and resolves to the IP address 163.61.188.89, which is assigned to AS153568 NEW DHAKA HARDWARE and geolocated in the United States. No TLS certificate is present, indicating that the site operates without encryption. The authoritative nameservers are listed as vip1.cupisweb.com and vip2.cupisweb.com. The page title returned by the server is "trust wire bank," and the domain is explicitly noted to impersonate the Trust Wallet brand, falling under a crypto‑scam classification.

Detection infrastructure shows mixed signals: Gridinsoft assigns a trust score of 0 out of 100, Scamadviser reports a score of 1 out of 100, and the domain appears on a single security blocklist. PhishDestroy has already blocked the domain, and VirusTotal reports that 16 of 95 scanning engines flag the site as malicious. Despite these indicators, the current HTTP status is reported as offline, suggesting that the site is no longer actively serving content at the time of analysis.

Uncertainty remains around the exact content that was hosted before takedown, as no visual or functional details have been captured. Defenders should continue to block the domain and its associated IP at perimeter and DNS filtering layers, monitor the hosting ASN for potential reuse, and incorporate the observed trust‑score anomalies into broader threat‑intel feeds. Ongoing vigilance is advised, especially given the brand‑impersonation intent and the low trust scores that indicate a high likelihood of malicious activity.