trustwallett[.]co[.]com

trustwallett.co.com is flagged as a high‑risk brand‑impersonation site targeting Trust Wallet users. The domain resolves to the IPv4 address 80.64.19.62, which belongs to AS48031 registered to Ivanov Vitaliy Sergeevich in Poland. Registration data show the domain was created on 16 August 1997 and is serviced by Moniker Online Services LLC; the authoritative name servers are ns1.nic.co.com through ns4.nic.co.com. No SSL certificate is present, indicating the site operated over plain HTTP.

The page title returned from the live host reads “Trust Wallet – Secure, Fast & Effortless Crypto Management,” matching the advertised brand but providing no further functional detail. VirusTotal reports that 16 of 95 scanned security vendors flagged the domain, confirming malicious classification. The host is listed on four independent blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—reinforcing the assessment. The public intelligence categorises the campaign as a crypto‑scam, consistent with the targeted brand.

The site has been taken offline, yet the IP address and name‑server infrastructure remain active and could be reused. Defenders should ensure the domain and its resolved IP are added to network deny lists, monitor the listed name servers for future registrations, and maintain vigilance for any re‑appearance of the same infrastructure. Because the underlying page content beyond the title has not been captured, further analysis should be performed if the domain resurfaces to verify the presence of credential‑stealing forms or malicious payloads.