trustwalletusdt[.]in

Analysis of the domain www.trustwalletusdt.in indicates it is a confirmed crypto scam impersonating Trust Wallet, a legitimate cryptocurrency wallet service. The domain was registered on March 22, 2026, through HOSTINGER operations, UAB, and resolves to the IP address 216.198.79.1, hosted by Lefkoff Industries in the United States. As of July 22, 2026, the domain returns an HTTP 404 status, meaning it is currently offline, though this does not eliminate prior malicious activity. The page title, 'Send USDT,' aligns with common crypto scam tactics, where victims are tricked into transferring Tether (USDT) under false pretenses. Infrastructure analysis reveals the use of Vercel and jsDelivr, technologies often employed for rapid deployment and content delivery, which can facilitate scam operations.

The domain is secured with a Let's Encrypt SSL certificate, a common practice even among malicious sites to appear legitimate. Nameservers are set to ns1.dns-parking.com and ns2.dns-parking.com, a configuration sometimes associated with low-cost or disposable hosting environments. Security vendor detections are limited but notable: three of 94 vendors on VirusTotal flagged the domain as malicious, and it appears on one security blocklist, with PhishDestroy explicitly blocking it. The scam type is classified as a crypto scam, though the exact mechanics—such as whether it involved a wallet drainer, fake support, or fraudulent investment scheme—are not specified in available data. No evidence links this domain to broader threat actor infrastructure or known phishing kits at this time.

Defenders should treat this domain as high-risk for Trust Wallet impersonation. While offline, it may resurface under similar naming conventions or infrastructure. Organizations should monitor for related domains, block the IP 216.198.79.1, and alert users to the risk of USDT transfer scams targeting Trust Wallet users.