# trustwealthinvest.sbs — SUSPICIOUS

> trustwealthinvest.sbs hosts a crypto drainer impersonating WealthInvest brand. VirusTotal: 0/95 detections. Avoid visiting this domain immediately.

## Summary
PhishDestroy identifies trustwealthinvest.sbs as an active crypto drainer impersonating legitimate investment brands to trick users into connecting cryptocurrency wallets. The domain mimics trusted financial services to deceive victims into authorizing malicious transactions that drain digital assets. Attackers leverage urgency and perceived credibility to rush users into making irreversible mistakes.  This domain was flagged with zero detections on VirusTotal (0/95 engines), despite its malicious intent, suggesting evasion techniques are in play. Registered through Dynadot LLC on March 14, 2026, the domain resolves to IP 198.251.84.200, which hosts multiple high-risk endpoints. The absence of blocklist entries highlights the stealth nature of this campaign, posing a significant risk to cryptocurrency holders seeking investment opportunities.  If you visited trustwealthinvest.sbs, disconnect your wallet immediately and revoke any unauthorized permissions via your wallet’s connected app settings. Scan your device for malware using reputable security tools and monitor wallet transactions for suspicious activity. Report the domain to your security team or trusted threat intelligence platforms to prevent further exploitation. Exercise extreme caution with domains promising unrealistic returns or mimicking financial institutions.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-14 07:03:46
- Registrar: Dynadot LLC
- IP: 198.251.84.200

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/7390896a-1a9c-444e-b54b-931c29eee55f
- PhishDestroy: https://phishdestroy.io/domain/trustwealthinvest.sbs/
- LLM endpoint: https://phishdestroy.io/domain/trustwealthinvest.sbs/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/trustwealthinvest.sbs/
Last updated: 2026-03-23