trustwalletpdx[.]com

Analysis of trustwalletpdx.com indicates a confirmed crypto scam impersonating Trust Wallet, a well-known cryptocurrency wallet service. The domain was registered on February 21, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. Infrastructure analysis reveals hosting on a Hong Kong-based IP (154.215.201.195) under AS134548 (DXTL Tseung Kwan O Service), a network segment previously linked to fraudulent activity. The domain was flagged by 15 of 93 security vendors on VirusTotal, though this figure reflects detections at the time of scanning and may not capture all subsequent assessments. It appears on one security blocklist and was blocked by PhishDestroy, a specialized anti-phishing service.

AlienVault OTX includes the domain in a threat intelligence pulse, further corroborating its malicious classification. The SSL certificate, issued by Let's Encrypt (R12), is standard for both legitimate and fraudulent sites, providing no inherent indication of trustworthiness. Detected technologies include Nginx, HSTS, and HTTP/3, which are common in modern web infrastructure but do not distinguish between benign and malicious use. Nameservers (a8.share-dns.com, b8.share-dns.net) are shared resources, often exploited for rapid domain deployment in phishing campaigns. Gridinsoft assigns the domain a trust score of 0/100, reinforcing its high-risk status.

As of July 23, 2026, the domain is offline, likely due to takedown efforts or voluntary suspension by the threat actor. However, defenders should treat this domain as compromised and maintain blocklist entries to prevent accidental access. Organizations using Trust Wallet or similar services should monitor for similar impersonation attempts, particularly those leveraging variations of the brand name with added suffixes or prefixes. No concrete evidence of the exact scam mechanics (e.g.