trustwallet-miniapp[.]cc

trustwallet-miniapp.cc is currently active and hosts a site whose title reads “Trust Wallet”, directly matching the targeted brand. The domain is secured with a Let’s Encrypt certificate (issuer YE1) and returns HTTP 200, indicating a functional web server. DNS resolution points to IP 101.99.90.186, an address owned by Shinjiru Technology Sdn Bhd in Malaysia. Registration was performed via Internet Domain Service BS Corp and the authoritative nameservers are ns1.cloud-zero.net and ns2.cloud-zero.net. The domain’s MX record points to mail.trustwallet‑miniapp.cc, suggesting potential use for phishing‑related email campaigns. Threat intelligence lists the site on three security blocklists and it is explicitly blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis shows ten of ninety‑one scanners flag the domain as malicious, reinforcing the suspicion of brand‑impersonation activity. While the page content has not been examined, the combination of brand‑matching title, active hosting, and multiple independent detections indicates a high‑risk impersonation campaign targeting Trust Wallet users. Defenders should add the domain to URL filtering and email security policies, monitor for any outbound connections to the associated IP, and consider sharing the indicator with threat‑intel platforms. Ongoing observation is advised to detect any changes in hosting or certificate renewal that could affect mitigation controls.