apps-trust-wallet[.]com

The domain apps-trust-wallet.com was registered on February 21 2026 and is currently hosted behind Cloudflare's network (nameservers emerie.ns.cloudflare.com and nero.ns.cloudflare.com, IP 104.21.67.201, ASN 13335, United States). The TLS certificate is issued by Google Trust Services under the WE1 root, indicating a valid HTTPS endpoint, but the web server returns HTTP 403 Forbidden for all requests, and the page title reported by scanners is “403 Forbidden”. The site is flagged as a brand‑impersonation of Trust Wallet and classified as a crypto‑scam. Infrastructure analysis shows the presence of Envoy, HTTP/3, and enforced HSTS, all typical of Cloudflare‑protected services.

The domain appears on three independent security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans report five detections out of ninety‑five scanners, reinforcing the malicious assessment. Gridinsoft assigns a trust score of zero out of one hundred, reflecting extreme risk. No additional content or page‑level details have been captured because the site is offline and returns only a 403 response.

The combination of recent registration, use of a well‑known brand name, low trust score, multiple vendor detections, and inclusion on blocklists indicates a high likelihood that the domain is being used for fraudulent activity targeting Trust Wallet users. Defenders should continue to block the domain at network perimeter, update URL filtering policies, and monitor for any future changes in HTTP response or content. Threat‑intel teams should correlate any observed traffic to the IP address 104.21.67.201 with known Cloudflare abuse patterns and consider reporting the domain to additional abuse‑handling services. Because the site currently returns only a forbidden page, further investigation may be limited, but the existing evidence justifies an elevated risk rating and proactive mitigation.