truttwalet[.]art

This domain, truttwalet.art, is flagged as a credential theft scam. Analysis indicates that the domain does not impersonate any specific brand and does not utilize a known crypto drainer kit. However, the domain's primary function appears to be the collection of user credentials through deceptive means.

Infrastructure analysis reveals that truttwalet.art has a VirusTotal (VT) score of 19/95, indicating that a significant number of security vendors recognize it as malicious. The domain is registered through Go Daddy, LLC, and resolves to the IP address 192.253.225.218. The domain was created on December 24, 2025, and is currently listed on one security blocklist. It is also marked as taken offline, which suggests that the domain has been deactivated or is no longer actively serving content.

The current status of truttwalet.art is offline, which reduces the immediate risk of active credential theft. However, the domain's previous presence on a security blocklist and its VT score of 19/95 indicate a history of malicious activity. Users should remain cautious and avoid interacting with any links or content associated with this domain, even if it appears to be inactive. Organizations should ensure that their security protocols include monitoring for any resurgence of activity from this domain and educate their users on the signs of credential theft scams.