reliancecic[.]com[.]trustwellcb[.]com

The domain reliancecic.com.trustwellcb.com was registered on September 17, 2025 through Dynadot LLC and resolves to the IPv4 address 192.3.190.188, which belongs to the HostPapa network (AS36352) located in the United States. No TLS certificate is presented for the site, indicating that HTTPS was not enabled at the time of analysis. The authoritative nameservers are dns1.webproserver.com and dns2.webproserver.com, both pointing to the same hosting provider. The page title returned from the HTTP response is "Home - Earthwise Equity Bank," a title that bears no obvious relation to the advertised Trust Wallet impersonation, suggesting either a misconfiguration or a rapid content change before takedown.

The domain is listed on a single security blocklist and has been actively blocked by PhishDestroy. Independent scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting extreme distrust. VirusTotal scans show that 12 of 95 scanning engines flag the domain as malicious, providing additional corroboration of its threat status. The site is currently taken offline, limiting real‑time observation, and no SSL/TLS artifacts are available for further certificate analysis.

The threat category is identified as a crypto‑related scam that impersonates the Trust Wallet brand, leveraging brand trust to lure victims. Uncertainty remains regarding the specific payload or credential‑harvesting mechanisms that may have been hosted, as the offline status prevents content verification and no explicit phishing kit signatures have been reported. Defensive actions should include immediate network‑level blocking of the IP address 192.3.190.188 and the domain name, updating intrusion‑detection signatures with the observed indicators, and monitoring the registrar Dynadot and the HostPapa AS for any re‑registration attempts.