sndmx[.]net

This domain, sndmx.net, is actively impersonating Trust Wallet, a well-known cryptocurrency wallet service, as part of a confirmed crypto scam operation. Registered on March 13, 2026, through Alibaba Cloud Computing Ltd. (HiChina), the domain resolves to IP address 23.225.236.96, hosted under AS40065 (CNSERVERS LLC) in the United States. The page title, written in Chinese, explicitly promotes Trust Wallet and Binance-branded wallet downloads, reinforcing its fraudulent intent to deceive users seeking legitimate cryptocurrency tools. Infrastructure analysis reveals the domain uses nameservers ns1.judns.com and ns2.judns.com, a configuration often observed in phishing campaigns. The site remains accessible with an HTTP 200 status, indicating active hosting, and employs a Let's Encrypt SSL certificate (serial E7), which provides encryption but does not validate legitimacy. Security vendors have flagged the domain, with 5 out of 95 engines on VirusTotal detecting malicious activity, and it appears on at least one security blocklist. The Gridinsoft trust score of 0/100 further corroborates its high-risk classification. While the exact content and functionality of the site have not been fully analyzed, the combination of brand impersonation, recent registration, and security detections confirms its role in a crypto scam. Defenders should treat this domain as a confirmed threat, block access at the network level, and monitor for related infrastructure. Organizations should also alert users to avoid downloading software from this domain, as it likely distributes malicious applications designed to steal cryptocurrency credentials or assets.