fscbk[.]com[.]trustworthfin[.]com

The domain fscbk.com.trustworthfin.com was registered on February 21, 2026 through Dynadot Inc. It hosts a single page whose title is “Home” and returns HTTP 200. The site is classified as a brand‑impersonation campaign targeting Trust Wallet and is associated with a cryptocurrency‑related scam. The SSL certificate is identified as “R11”. The domain appears on one security blocklist and has been actively blocked by PhishDestroy. VirusTotal scans show that 11 of 95 security vendors flag the domain as malicious, and the Gridinsoft trust score is 0 out of 100, indicating a high confidence of malicious intent.

Infrastructure analysis reveals that the domain resolves to the IP address 198.12.80.250, which belongs to AS36352 (HostPapa) located in the United States. The authoritative nameservers are 5014.ns1.abovedomains.com and 5014.ns2.abovedomains.com, both typical of bulk‑hosting services. The combination of a newly created domain, low trust scores, and a shared hosting provider aligns with known patterns used in cryptocurrency phishing operations. No additional sub‑domains or related infrastructure have been observed in public records, and the page content beyond the title has not been disclosed.

Defenders should immediately add fscbk.com.trustworthfin.com to block lists at perimeter firewalls, DNS filtering services, and endpoint protection solutions. Continuous monitoring of the associated IP 198.12.80.250 and its hosting ASN is advised, as the server may be reused for further malicious domains. Organizations that use Trust Wallet should educate users about unsolicited requests that reference the brand, and encourage verification of URLs before entering credentials or wallet keys. Because the site is still active, threat‑intel feeds should be updated to reflect the high‑risk status and to propagate the indicator set to downstream security controls.