trrustweallet[.]gitbook[.]io

The domain trrustweallet.gitbook.io is currently active and serves a page titled "Trust Wallet | Как создать TrustWallet? Подробная инструкция | TrustWallet," indicating an attempt to associate with the Trust Wallet brand. The site was created on March 30, 2014 and returns an HTTP 307 redirect, suggesting it forwards visitors to another location. It uses a TLS certificate issued by a well‑known certificate authority, confirming encrypted communications. Infrastructure analysis shows the domain resolves to IP address 104.18.40.47, which belongs to a large content delivery network operating out of Canada. The hosting environment includes a documentation platform, cloud storage, and modern web protocols such as HTTP/3, indicating a relatively recent web stack. The domain is listed on three security blocklists and has been identified by multiple anti‑phishing feeds, including PhishDestroy, MetaMask, and SEAL. VirusTotal scans report 11 of 91 security vendors flag the domain as malicious, reinforcing the suspicion of abuse. Given the brand impersonation and the presence on blocklists, defenders should continue to block the domain at network perimeters, monitor for any related indicators of compromise, and update threat intelligence feeds to include this host. Further examination of the redirected endpoint is recommended to determine any credential‑harvesting or malware distribution activities.