trustbtcwallet[.]com

The domain trustbtcwallet.com was registered on October 20, 2025 through Dynadot LLC and is currently taken offline, though historic scans indicate it responded with HTTP status 200 before removal. DNS resolution points to IP address 199.59.243.228, which belongs to Amazon.com, Inc. (AS16509) and is geolocated to the United States. The server stack identified Nginx with OpenResty and HTTP Strict Transport Security (HSTS) enabled, and the site used a Let's Encrypt certificate (R13) that was valid at the time of capture. The page title returned by the server is the plain domain name, trustbtcwallet.com, and the authoritative nameservers are ns1.dyna-ns.net and ns2.dyna-ns.net.

Security tooling assigns the domain a Gridinsoft trust score of 0 out of 100, reflecting extreme risk, and it appears on one external blocklist. Malware and URL reputation services flagged the site: seven of ninety‑five VirusTotal scanners reported malicious activity, and PhishDestroy has listed the domain as blocked. Intelligence attributes the site to an "Airdrop Scam" phishing kit, classifying the operation as a crypto scam that attempts to drain cryptocurrency assets from victims.

The evidence confirms the presence of a malicious infrastructure but does not disclose the specific victim‑targeting mechanisms or the exact payload delivered. Analysts should continue to monitor the IP address for any re‑hosting activity, enforce blocklist updates in perimeter defenses, and consider adding the domain and its associated IP to internal threat‑intel feeds. Because the domain is offline, immediate takedown is not possible, but defenders should remain vigilant for any resurgence or copycat domains that reuse the same registrar, hosting provider, or kit signature.