trust-defi-guide[.]com

trust-defi-guide.com was registered on 09 April 2026 through the registrar Spaceship, Inc. The domain uses Cloudflare's authoritative name servers galilea.ns.cloudflare.com and titan.ns.cloudflare.com and resolves to the IPv4 address 89.167.86.140. Since its creation the domain has been listed on three independent security blocklists and is actively blocked by the PhishDestroy, MetaMask, and SEAL filtering services, indicating that multiple threat intelligence feeds consider it malicious. VirusTotal analysis shows that 17 of 91 scanned security vendors flagged the domain, reinforcing the suspicion of malicious activity.

The threat profile assigned to the domain is a crypto drainer, with a high risk rating and an active status as of the report date 29 July 2026. No public information on the site’s page title, SSL certificate details, HTTP response codes, or associated malware kits has been published, leaving the exact content and delivery mechanisms unverified. Analysts should treat any traffic to the domain as hostile, block the domain at DNS and proxy layers, and monitor outbound connections to the hosting IP 89.167.86.140 for potential exfiltration attempts.

Continuous re‑scanning with VirusTotal and inclusion in local blocklists are recommended to capture any changes in vendor detections. Additionally, organizations using cryptocurrency wallets should enforce transaction whitelisting and educate users about unsolicited requests that may redirect to this domain. The combination of recent registration, Cloudflare hosting, multiple blocklist listings, and vendor detections suggests a purpose‑built infrastructure for illicit crypto draining.