trustwallets-ruddy[.]vercel[.]app

Analysis of the domain trustwallets-ruddy.vercel.app indicates a crypto scam operation impersonating Trust Wallet, active as of February 21, 2026. The domain was registered through Tucows Domains Inc. and resolves to IP address 216.198.79.67, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The SSL certificate is issued by Google Trust Services (WR1), a common provider for both legitimate and malicious sites, offering no definitive indication of intent. The page title, as recorded, is 'Trust Wallet,' directly matching the targeted brand, and the scam type is classified as a crypto scam based on available intelligence.

Detection data is limited but notable: one of 93 security vendors on VirusTotal flagged the domain as malicious, and it appears on a single security blocklist. The domain has since been taken offline, returning an HTTP 451 status, and is blocked by PhishDestroy. No additional context regarding the phishing kit, redirection chains, or specific attack vectors is available from the provided evidence. The absence of widespread detection does not imply safety, as phishing domains often evade initial scans before gaining broader visibility.

Defenders should treat this domain as confirmed malicious infrastructure. Network-level blocking of 216.198.79.67 and monitoring for related subdomains under vercel.app are recommended. Given the domain's association with Trust Wallet, organizations handling cryptocurrency transactions should prioritize user education to verify official wallet URLs and enable multi-factor authentication. Registrars and hosting providers should review abuse reports for similar patterns, particularly domains using brand names with appended terms (e.g., 'ruddy') on platform-as-a-service providers like Vercel.