wallet-trust[.]co[.]com

Analysis of wallet-trust.co.com shows a newly registered domain created on February 21, 2026 and hosted by Moniker Online Services LLC. The domain resolves to IP address 45.93.20.38, which is geolocated to Hong Kong. HTTP requests to the host return a Cloudflare challenge page with the title "Attention Required! | Cloudflare," indicating that the site is protected by Cloudflare but currently presents a verification barrier. The underlying web server is identified as Nginx, and the TLS certificate is issued by Let’s Encrypt (R12).

The domain has been listed on three security blocklists, specifically PhishDestroy, MetaMask, and SEAL, reflecting its classification as a crypto‑drainer scam. VirusTotal scans report that two of ninety‑three security vendors flagged the domain, reinforcing the malicious assessment. The domain is presently offline, which may be a temporary takedown or a shift in infrastructure. Defenders should continue to block resolution of 45.93.20.38 and monitor for any re‑hosting attempts.

Network‑level controls that deny traffic to the listed blocklists and to Let’s Encrypt certificates issued to this domain are advisable. Endpoint security solutions should incorporate the observed indicators—domain name, IP, blocklist entries, and Cloudflare challenge page title—into detection rules. Because the site content has not been captured, the exact phishing payload or victim interaction flow remains unknown; however, the presence on MetaMask blocklists strongly suggests attempts to harvest cryptocurrency credentials. Continuous threat‑intel feeds should be consulted for any re‑appearance of the domain or related infrastructure, and any observed attempts to contact the domain should be treated as high‑confidence malicious activity.