trustwalletonlinesupport[.]info

This domain, trustwalletonlinesupport.info, is actively flagged as a high-risk brand impersonation threat targeting Trust Wallet users. Registered on March 29, 2026, through Dynadot Inc, the domain resolves to IP address 198.251.81.49, hosted by FranTech Solutions in the United States. Infrastructure analysis reveals nameservers ns103.my-control-panel.com and ns104.my-control-panel.com, a configuration commonly associated with low-reputation hosting environments. The domain is secured with a Let's Encrypt SSL certificate (E8) and utilizes LiteSpeed with HTTP/3 support, technologies that do not inherently indicate malicious activity but are frequently adopted by threat actors for performance and evasion. The domain appears on three security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, indicating confirmed malicious classification by multiple independent detection systems. Gridinsoft assigns a trust score of 0/100, further corroborating its high-risk status. While the domain returns an HTTP 200 status, suggesting an operational web presence, the exact content remains unanalyzed; however, the page title and known intelligence confirm it impersonates Trust Wallet, likely to deceive users into disclosing credentials or transferring cryptocurrency. Defenders should treat this domain as an active phishing threat. The combination of brand impersonation, low-reputation hosting, and multi-source blocklisting provides sufficient evidence for immediate blacklisting and user warnings. No legitimate association with Trust Wallet or its official support channels is known, and the domain's infrastructure does not align with typical corporate or service provider patterns. Further monitoring is recommended to track potential shifts in hosting or certificate issuance, though current indicators strongly support its classification as malicious.