trustwallet-insure[.]com

trustwallet-insure.com was registered on February 21, 2026 through Ultahost, Inc. The domain resolves to 172.67.158.211, an address owned by Cloudflare (AS13335) and located in the United States. Both authoritative nameservers are Cloudflare‑provided (dahlia.ns.cloudflare.com, damian.ns.cloudflare.com), indicating the site was hosted behind Cloudflare’s edge network. No TLS certificate is presented, so HTTPS connections would be unavailable or would fall back to HTTP, a typical characteristic of low‑effort impersonation sites. The page title returned by the server is “Even geduld…”, which does not reference the targeted brand and provides no further context about the content. The domain has been added to three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, confirming that multiple anti‑phishing services have identified it as malicious.

VirusTotal scanning shows ten of ninety‑one security vendors flag the domain, reinforcing the suspicion of malicious activity. The listed scam type is “Crypto Scam”, and the brand target is Trust Wallet, indicating that the operator intends to deceive users of the Trust Wallet cryptocurrency application. Infrastructure analysis reveals no additional hosting clues beyond the Cloudflare edge, and no SSL certificate prevents the use of certificate‑based reputation checks. The lack of a valid TLS certificate also limits the ability of browsers to enforce HSTS or certificate pinning.

The current status is reported as “taken offline”, suggesting that the site may have been temporarily removed or is no longer serving content, but the registration and blocklist entries remain active. Uncertainty remains regarding the exact payload or credential‑harvesting mechanism, as the page content has not been captured and the title provides no insight.