senclusdtbnb[.]netlify[.]app

The domain senclusdtbnb.netlify.app was registered on 2026-03-03 and currently resolves to the IPv4 address 35.157.26.135. The address is part of the Amazon Web Services network (AS16509) hosted in Germany. Netlify is identified as the registration and hosting platform, and the site advertises HTTP Strict Transport Security (HSTS) in its technology fingerprint.

Network interrogation indicates the site returns an HTTP 301 redirect response. The TLS certificate presented is DigiCert Global G2 TLS RSA SHA256 2020 CA1, issued by DigiCert Inc, providing a legitimate‑looking certificate chain. The domain appears on two public security blocklists and has been actively blocked by the PhishDestroy and ScamSniffer filters. Although VirusTotal reports 0 detections out of 95 scans, this absence of alerts does not constitute evidence of benign behavior.

The page title retrieved from the server is "Transfer Trust Wallet", directly referencing the TrustWallet brand. Intelligence tags the activity as credential phishing, a form of brand impersonation aimed at harvesting TrustWallet user credentials. The risk level is marked as under_investigation, and the site remains active as of the report date, July 12, 2026.

Defenders should incorporate the domain into outbound and inbound filtering policies, particularly for traffic to Netlify‑hosted resources. Continuous monitoring of DNS resolution for 35.157.26.135 and adjacent AS16509 subnets can reveal reuse of the same infrastructure for related campaigns. Given the lack of publicly analyzed page content, a safe‑browse or sandboxed request is advised to confirm the presence of credential‑stealing mechanisms before applying broader remediation steps.