trustwalletcustomerservicephonenumber[.]blogspot[.]com[.]ee

Analysis of the domain trustwalletcustomerservicephonenumber.blogspot.com.ee indicates active brand impersonation targeting TrustWallet users. The domain, registered through Zone Media OÜ on July 9, 2010, currently resolves to the IPv6 address 2a00:1450:4001:c13::84, hosted on infrastructure belonging to Google LLC (AS15169) in Germany. Nameservers point to Google’s DNS infrastructure (ns1.google.com through ns4.google.com), and the SSL certificate is issued by Google Trust Services, suggesting the use of legitimate but repurposed hosting services for malicious intent. The page title explicitly references 'trust wallet customer service phone number,' aligning with the observed scam type of brand impersonation. Detection data reveals the domain is flagged by three security blocklists and has been identified as malicious by 9 of 91 security vendors, as recorded in available threat intelligence feeds. The domain is actively blocked by multiple security providers, further corroborating its high-risk status. Infrastructure analysis reveals the use of Blogger as the underlying platform, alongside technologies such as Java, Python, OpenGSE, Clipboard.js, and HTTP/3. The HTTP status code 302 suggests potential redirection activity, though the final destination remains unconfirmed due to lack of direct access or further telemetry. The domain’s trust score is assessed at 0/100, reinforcing its classification as malicious. Defenders are advised to treat this domain as a confirmed threat vector for brand impersonation. Network-level blocking of the resolved IP and domain, along with monitoring for related subdomains or similar patterns, is recommended. Given the use of reputable hosting infrastructure, additional scrutiny of other domains leveraging the same nameservers or SSL certificate authority may be warranted to identify related campaigns.