trustwalletinvests[.]org

Analysis of trustwalletinvests.org indicates a high‑confidence brand‑impersonation attempt targeting users of the Trust Wallet cryptocurrency wallet. The domain was registered on 21 February 2026 through Hostinger operations, UAB, and uses the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. DNS resolution points to the IPv4 address 92.113.23.46, which belongs to AS47583 Hostinger International Limited and is geolocated in Germany. No Transport Layer Security certificate is presented for the host, confirming that the site does not serve HTTPS content. The page title returned from the now‑offline site reads “TrustWallet Invest – Your Trusted Investment Partner,” which explicitly references the Trust Wallet brand and suggests an investment or financial service, consistent with the listed crypto‑scam classification.

The domain has been added to at least one security blocklist and was flagged by the PhishDestroy takedown service, confirming that active mitigation actions have been taken. VirusTotal scans show that seven of ninety‑three antivirus engines flagged the domain as malicious, providing additional independent corroboration of its illicit nature. The current HTTP status is offline, limiting real‑time interaction but preserving evidence of the malicious infrastructure. Uncertainty remains regarding the specific payload or phishing kit employed, as no detailed page content or capture of login forms has been publicly released.

The absence of an SSL certificate and the use of a generic parking provider suggest a low‑cost, disposable deployment rather than a sophisticated, persistent operation. Defenders should update their domain‑blocking feeds to include trustwalletinvests.org, monitor the associated IP address 92.113.23.46 for any future hosting changes, and consider adding the ASN AS47583 to watchlists for related activity.