woofiswap[.]app

Analysis of woofiswap.app indicates that the domain is being used to impersonate the Trust Wallet brand. The site was registered on 21 February 2026 through Tucows Domains Inc and resolves to the IP address 172.67.184.3, which is owned by Cloudflare, Inc. (AS13335) and geolocated in the United States. DNS resolution uses the authoritative name servers ns1.renewyourname.net and ns2.renewyourname.net. The TLS certificate presented is identified as WE1, confirming that HTTPS is enabled.

A page title retrieved from the site reads “Trust Wallet Light,” matching the declared target brand. The domain has been classified as a crypto‑related scam and is currently offline. Reputation services assign a low Scamadviser trust score of 26 out of 100, and the domain appears on a single security blocklist operated by PhishDestroy. VirusTotal scans show that two out of ninety‑five antivirus engines flagged the domain as malicious.

No additional public intelligence such as OTX reports or Safe Browsing entries were found. The limited detection footprint suggests a short‑lived campaign that was taken down quickly, but the presence of Cloudflare hosting and a legitimate‑looking TLS certificate may be used to lend credibility to future iterations. Defenders should block the domain and its associated IP address at perimeter filters, monitor DNS queries for the listed name servers, and add the domain to internal threat intelligence feeds. Continuous re‑evaluation of Cloudflare‑hosted assets is advised, as the infrastructure can be repurposed for new impersonation attempts.