trustwalletp2p[.]info[.]bnbscan[.]org

On 24 July 2026 the domain trustwalletp2p.info.bnbscan.org was observed hosting a page titled “Trust Wallet – USDT P2P Exchange Platform”. The page title indicates an attempt to impersonate the Trust Wallet brand and to lure victims into a USDT peer‑to‑peer exchange scheme. The domain was registered on 21 February 2026 and is currently taken offline. DNS resolution points to the IPv4 address 192.64.80.67, which is allocated to Interserver, Inc. (AS19318) and geolocated in the United States.

The server presented an SSL certificate identified as “R13”, consistent with a rapidly‑issued certificate often used by malicious operators. The site has been blocked by the PhishDestroy phishing‑filtering service and appears on one additional security blocklist. VirusTotal analysis recorded detections from four of ninety‑three scanned security vendors, reinforcing the malicious classification. Independent reputation scoring from Gridinsoft assigns a trust score of zero out of one hundred, indicating a complete lack of credibility.

The domain explicitly impersonates the Trust Wallet brand, and the associated scam type is recorded as a crypto scam. No further technical artifacts such as HTTP response codes, content hashes, or additional infrastructure links have been released, leaving the full extent of the supporting infrastructure uncertain. Defenders should add the IPv4 address 192.64.80.67 to network‑level deny lists, ensure that corporate web‑filtering solutions block the full hostname, and monitor for any future re‑registration or resurrection of the domain. Continuous tracking of the associated blocklist entries and periodic rescans with multi‑engine malware services are recommended to detect any evolution of the threat actor’s tactics.