tagem[.]trust-safeguard-security[.]com

On July 23, 2026 analysts examined the domain tagem.trust-safeguard-security.com, which is currently offline but was previously flagged for brand impersonation targeting Trust Wallet. The site was registered on October 25, 2025 through OwnRegistrar, Inc., and resolves to the IP address 78.153.150.76, an address owned by AS215540 GLOBAL CONNECTIVITY SOLUTIONS LLP and geolocated in South Korea. DNS resolution is serviced by Cloudflare nameservers barbara.ns.cloudflare.com and kyrie.ns.cloudflare.com, and the domain presented a TLS certificate issued by Google Trust Services under the WE1 root, indicating a legitimate‑looking HTTPS configuration.

Technical fingerprinting revealed a hosting stack that includes Plesk control panel, PHP runtime, RequireJS and Prototype JavaScript libraries, and the use of HTTP/3, all typical of a standard web service but not directly indicative of malicious functionality. The page title captured during the brief crawl was "Best Crypto Hardware for Web3, NFTs and DeFi | SafePal," a title that references a competing hardware wallet brand, further suggesting an attempt to attract cryptocurrency‑focused users.

Detection data shows that 16 of 95 antivirus and URL‑reputation engines on VirusTotal flagged the domain, and it appears on a single external blocklist maintained by PhishDestroy. Gridinsoft assigned a trust score of 0 out of 100, reflecting a high confidence of malicious intent. The overall risk assessment is elevated, consistent with the listed scam type of "Crypto Scam."

Uncertainties remain regarding the exact content that was served before the takedown; no login forms, credential harvesting pages, or payloads have been publicly disclosed, and the site’s offline status prevents current behavioral analysis.