thetrustcheck[.]app

The domain thetrustcheck.app was registered on February 21, 2026 through Porkbun LLC and currently resolves to the IPv4 address 75.2.60.5, which belongs to Amazon.com, Inc. (AS16509) in the United States. The site’s SSL certificate received an E6 rating, indicating a weak or improperly configured encryption layer. A Gridinsoft trust score of 0 out of 100 further underscores the lack of legitimacy. The page title returned from the host is "TrustCheck - Advanced Crypto Wallet Risk Analysis & AML Compliance," which suggests an attempt to masquerade as a financial‑technology service that offers cryptocurrency risk assessment and anti‑money‑laundering tools.

The domain is listed on four independent security blocklists – PhishDestroy, Polkadot, Enkrypt, and Codeesura – confirming that multiple threat‑intelligence feeds have flagged it as malicious. VirusTotal analysis shows that seven of ninety‑five scanned security vendors flagged the domain, providing additional corroboration of its suspicious nature. The intelligence indicates the site is being used for an investment‑scam operation that impersonates multiple brands (denoted as "across"), a typical pattern for fraudsters seeking to exploit trust in established financial services. The site is presently taken offline, which may be a temporary takedown or a deliberate evasion tactic.

Defenders should continue to block the domain at network perimeters and update URL filtering policies to include the listed blocklists. Continuous monitoring of the associated IP address is advised, as the Amazon hosting environment could be reused for other malicious actors. Analysts should also consider adding the domain to internal threat‑intel repositories and correlating any future traffic to the IP 75.2.60.5 with other known malicious infrastructure. Until the site is definitively taken down, the combination of low trust scores, weak SSL, blocklist presence, and vendor detections indicates a high probability that thetrustcheck.