trust-wallet-aml[.]org

The domain trust-wallet-aml.org is part of an AML scam targeting TrustWallet users. It has been flagged as malicious by 17 out of 91 vendors on VirusTotal, indicating a significant recognition of its threat potential. The domain was registered with Fewmoretaps OU d/b/a Trustname.com and hosted on an IP address located in France, under the organization YottaSrc. The site is currently offline, reducing its immediate threat, but the prior activity highlights the ongoing risks associated with brand impersonation scams.

This phishing operation specifically targets TrustWallet users by mimicking the brand's identity. The page title, "Analyze and Protect your Assets | Trust," suggests a deceptive attempt to lure users into believing they are engaging with a legitimate TrustWallet service. The domain's SSL certificate was issued by Let's Encrypt, a common choice for malicious actors due to its ease of access and cost-free issuance.

Despite its offline status, trust-wallet-aml.org exemplifies the tactics used by threat actors to exploit users' trust in well-known brands. The platform risk score of 83/100 reflects the high potential for harm had the site remained active. The domain's registration and subsequent takedown within a short time frame underscore the importance of rapid detection and response in mitigating phishing threats. This case serves as a reminder of the need for continuous vigilance and proactive measures to protect against similar scams.