trustwisepay[.]live

On July 24, 2026 the domain trustwisepay.live was recorded as an active threat vector targeting users of the Trust Wallet brand. The domain was registered on March 20, 2025 through Dynadot Inc. and resolves to the IP address 216.244.83.203, which is announced by the AS27323 Wowrack.com network and geolocated to the United States. The site presented the page title "Home | Mobile Banking, Credit Cards, Mortgages, Auto Loan," a title that bears no direct relation to the advertised Trust Wallet brand, suggesting deliberate brand impersonation to lure victims.

Infrastructure indicators show a low‑trust SSL certificate identified as R12 and a Gridinsoft trust score of 0 out of 100, both of which reflect a lack of legitimacy. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, confirming its classification as malicious. VirusTotal analysis returned detections from nine of ninety‑five scanning engines, reinforcing the malicious assessment.

The observed scam type is listed as a crypto scam, aligning with the Trust Wallet impersonation. As of the reporting date the domain is taken offline, but the associated IP and hosting provider remain active and should be monitored. Defenders are advised to add trustwisepay.live to local blocklists, enforce DNS filtering for the IP 216.244.83.203, and consider broader threat‑intel sharing of the observed indicators to prevent future exploitation.