amdamfr[.]com

Analysis of amdamfr.com shows a newly registered domain (created 21 Feb 2026) that has been taken offline but was previously used to impersonate Trust Wallet. The site presented the page title “trust钱包-TrustWallet网址-Trust钱包代币”, indicating a direct reference to the Trust Wallet brand and the term “wallet” in Chinese, consistent with the listed crypto‑scam classification. Infrastructure data reveals the domain resolves to IP 38.55.19.202, assigned to AS8796 FASTNET DATA INC in the United States. No TLS certificate was observed, confirming the absence of HTTPS protection.

The domain is hosted by DropCatch.com 716 LLC, a registrar commonly used for expiring‑domain capture, and is served by four name servers (a.share-dns.com, a10.share-dns.com, b.share-dns.net, b10.share-dns.net). Reputation signals are uniformly negative: Gridinsoft assigns a trust score of 0 / 100, three independent security blocklists flag the domain, and VirusTotal reports 16 of 93 scanners marking it as malicious. Additional blocklist engagements include PhishDestroy, MetaMask, and SEAL, all of which have listed the domain as hostile.

The combination of brand impersonation, lack of encryption, low‑reputation hosting, and multi‑vendor detection strongly supports classification as a high‑risk crypto‑scam. Defenders should immediately blacklist the domain and its IP address in network perimeter and endpoint controls, enforce strict DNS filtering for any sub‑domains that resolve to the same name servers, and monitor for future registrations that reuse the same registration patterns or target the Trust Wallet brand. Continuous threat‑intel feeds should be consulted for any resurgence of the site, and any user‑initiated connections to the domain should be treated as compromised.