dulcet-shortbread-b4be20[.]netlify[.]app

Analysis of dulcet-shortbread-b4be20.netlify.app indicates an active infrastructure used to impersonate Trust Wallet. The domain was created on 8 May 2026 and is hosted on Netlify, resolving to the IPv4 address 63.176.8.218, which belongs to an AWS EC2 instance in the eu-central-1 region (Germany). The site presents a valid DigiCert Global G2 TLS RSA SHA256 2020 CA1 certificate, providing HTTPS connectivity with HTTP status 200. The page title returned by the server is “Transfer Trust Wallet”, matching the declared brand target. The domain appears on two reputable blocklists (PhishDestroy and ScamSniffer) and is currently listed as active under investigation. Gridinsoft assigns a trust score of 0/100, reflecting a high risk assessment. No detection data from VirusTotal is available; the absence of detections does not imply safety. Concrete evidence beyond the infrastructure and title is not yet available, as the page content has not been examined. Defenders should add the domain to outbound filtering rules, monitor DNS queries for the IP address 63.176.8.218, and consider sinkholing the host to disrupt traffic. Continuous re-scanning of the URL for malicious payloads is recommended, and any observed credential submission should be treated as compromised. Organizations using Trust Wallet should alert users to verify URLs before entering credentials and enforce multi-factor authentication where possible.