pos[.]tr05[.]vip

Analysis of the domain pos.tr05.vip confirms its classification as a crypto scam site impersonating Trust Wallet, a cryptocurrency wallet service. The domain was registered on February 21, 2026, and has since been flagged by security vendors, including a detection by PhishDestroy. As of July 24, 2026, the domain is offline, though infrastructure analysis reveals it previously resolved to the IP address 47.251.110.237, hosted under AS45102 (Alibaba (US) Technology Co., Ltd.) in the United States. The SSL certificate is identified as R11, a detail that may assist in tracking related infrastructure.

The page title, 'Blockchain Investment Project Website - Unlock Financial Freedom,' aligns with common crypto scam themes, though the exact content and mechanics of the scam remain unconfirmed due to the site's current offline status. The domain appears on at least one security blocklist, and VirusTotal reports a detection by one of 95 security vendors, indicating limited but present awareness within the security community. No additional details regarding the phishing kit, redirects, or associated campaigns are available at this time.

Defenders should treat this domain as malicious and prioritize blocking it at the DNS or network level. Organizations using Trust Wallet or similar services should monitor for user reports of exposure to this domain and consider proactive user education regarding crypto-related scams. Given the domain's association with Alibaba's US hosting infrastructure, further investigation into related IPs or certificates may uncover additional malicious activity.