trustwallet-nob[.]com

This domain, trustwallet-nob.com, is identified as a high-risk brand impersonation threat targeting Trust Wallet, a cryptocurrency wallet service. Analysis indicates the domain was designed to deceive users into believing it is an official Trust Wallet platform, likely for credential harvesting or fraudulent transactions. No specific drainer kit signatures were observed, but the domain's structure and impersonation tactics align with known cryptocurrency phishing campaigns. The page title '网站筹建中' (translated as 'Website under construction') suggests an attempt to appear legitimate while masking malicious intent. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with malicious domains. It resolves to the IP address 45.207.200.164, hosted on AS8796 (FASTNET DATA INC) in the United States. VirusTotal reports 18 out of 95 security vendors flagging the domain as malicious, indicating broad detection across multiple threat intelligence sources. The domain appears on three security blocklists and lacks an SSL certificate, further reducing its legitimacy. No Google Safe Browsing (GSB) entries were found at the time of analysis, though this may reflect a lag in reporting. The domain is currently offline, likely due to takedown actions by security providers such as PhishDestroy, MetaMask, and SEAL. Despite its inactive status, the domain remains a residual risk due to potential re-registration or reuse of its infrastructure. Users are advised to verify wallet addresses through official channels and avoid interacting with domains impersonating cryptocurrency services. Organizations should monitor for related indicators, including the IP 45.207.200.164 and registrar Gname.com Pte. Ltd., to prevent future exposure.