trust-wallets[.]com

trust-wallets.com is an active domain that has been classified as a brand‑impersonation site targeting Trust Wallet users. The domain resolves to the Cloudflare IP address 188.114.96.3, which is registered to Cloudflare, Inc. in Canada. DNS is served by johnny.ns.cloudflare.com and raquel.ns.cloudflare.com, confirming the use of Cloudflare’s CDN infrastructure. An HTTPS certificate issued by Google Trust Services (WE1) is present, indicating that TLS termination is performed by the CDN rather than the underlying host. HTTP requests return a 403 status code and the page title is limited to “Just a moment…”, suggesting that the site is currently restricting access or employing a challenge page; no further content has been observed. Google Safe Browsing has flagged the domain for social engineering, and the site appears on three external blocklists, including PhishDestroy, MetaMask, and SEAL. AlienVault OTX references the domain in three separate threat‑intel pulses, and VirusTotal records 19 detections out of 91 scanners, reinforcing the malicious assessment. Registration information shows the domain was created through Gransy, s.r.o., a known registrar used for abusive domains. While the infrastructure details confirm malicious intent, the exact payload, credential‑stealing forms, or redirect behavior have not been disclosed in the available data. Defenders should block the domain at network perimeter and DNS layers, monitor for any outbound connections to 188.114.96.3, and update web‑filtering solutions with the listed blocklist entries. Users of Trust Wallet should be warned that any unsolicited request to this domain is likely fraudulent and should be ignored.