trust-io[.]created[.]app

The domain trust-io.created.app was registered on February 21, 2026 through Tucows Domains Inc. and resolves to the IP address 216.150.1.193, which is hosted in the United States under AS16509 (Amazon.com, Inc.). The site employed a Let’s Encrypt certificate (R13) and returned an HTTP 404 status when queried, indicating that the expected content was not served. The page title observed during collection was "Trust Wallet Extension - Secure Crypto Wallet for Your Browser," directly referencing the Trust Wallet brand, confirming a brand‑impersonation tactic. The domain is classified as a Crypto Scam and was listed on one security blocklist, where it was blocked by PhishDestroy.

Gridinsoft assigned a trust score of 0 out of 100, reflecting a maximal risk assessment. VirusTotal scans reported that four of ninety‑three security vendors flagged the domain, providing additional corroboration of malicious intent. Technical fingerprinting revealed a stack built on Node.js, React, Next.js, and Vercel, with ancillary services such as Google Cloud CDN, LaunchDarkly, and HSTS enabled, all of which are consistent with modern phishing‑as‑a‑service infrastructures. The nameservers ns1.vercel-dns.com and ns2.vercel-dns.com further tie the hosting to Vercel’s platform.

Current monitoring shows the site is offline, but the infrastructure components remain active and could be re‑used. Defenders should continue to block the domain at perimeter controls, add it to internal threat‑intel feeds, and monitor the associated IP address and ASN for any future activity. Continuous re‑evaluation is advised, as the underlying hosting environment is capable of rapid redeployment.