This domain, trustwallet-securlty.com, was registered on July 29, 2026 through Name.com, Inc. and resolves to the IPv4 address 185.158.133.1. The domain is currently classified as a high‑risk crypto drainer and remains active despite being listed on three public blocklists. Threat intelligence platforms PhishDestroy, MetaMask, and SEAL have each added the domain to their block lists, indicating that it is being used to target cryptocurrency wallets.
On VirusTotal the domain was examined by 91 scanning engines, of which four returned a malicious verdict, confirming the presence of at least one known malicious component. The domain’s authoritative name servers are ns1hwy.name.com, ns2fln.name.com, ns3fqs.name.com, and ns4jnz.name.com; these nameservers are typical of domains registered with Name.com and do not reveal additional hosting infrastructure. No SSL certificate information, HTTP response codes, or page‑title data are presently available, so the exact web content cannot be described.
Defenders should continue to block the domain at the DNS layer, update intrusion‑detection signatures to include the IP address 185.158.133.1, and monitor traffic for attempts to contact the listed name servers. Because the domain is a recent creation, automated detection may lag; security operations should treat any outbound connection to this host as suspicious and investigate associated user activity, especially any interactions with cryptocurrency wallet applications. Ongoing observation of the three blocklists and periodic rescanning on VirusTotal are recommended to detect any changes in the domain’s reputation.