trustwalletjbv[.]com

The domain trustwalletjbv.com was observed in a brand‑impersonation campaign targeting users of the Trust Wallet cryptocurrency application. VirusTotal records show that 13 of 93 scanning engines flagged the domain as malicious, indicating a moderate level of consensus among automated detectors. The domain resolves to the IPv4 address 154.215.201.202, which is registered to an autonomous system (AS134548) operated by DXTL Tseung Kwan O Service in Hong Kong. The hosting infrastructure presents an Nginx web server with HTTP/3 enabled and HTTP Strict Transport Security (HSTS) enforced, and the site is protected by a Let's Encrypt certificate (R13). The page title returned from the HTTP response is the Chinese phrase “没有找到站点”, translating to “Site not found”, which suggests that the content was either removed or never served.

Registration data indicate the domain was created on 29 October 2025 through the registrar Gname.com Pte. Ltd., and the current status is reported as offline. The domain appears on a single security blocklist and has been blocked by the PhishDestroy feed. Gridinsoft assigns the domain a trust score of 0 out of 100, reflecting the highest level of suspicion. The listed scam type is “Crypto Scam”, aligning with the Trust Wallet brand impersonation. Analysis confirms that the observed indicators—malicious detection ratio, low‑reputation IP location, lack of legitimate content, and a zero trust score—are consistent with a credential‑harvesting or fund‑diversion operation.

However, the offline status and the “site not found” title limit the ability to capture live payloads or phishing pages, leaving the exact delivery mechanism uncertain. Defenders should continue to block the domain at perimeter defenses, update URL filtering lists with the observed IP and ASN, and monitor for any re‑registration or infrastructure reuse.