trust-crypto-tips[.]com

Analysis of trust-crypto-tips.com indicates an active brand impersonation campaign targeting Trust Wallet users. The domain, registered on April 9, 2026, through Spaceship, Inc., resolves to IP 172.67.173.178, hosted on infrastructure attributed to Cloudflare, Inc. in Canada. The site returns an HTTP 200 status, suggesting operational availability, and its page title, 'Trust Wallet Tips,' aligns with the identified scam type of brand impersonation. Detection data shows the domain is flagged by three security blocklists, including PhishDestroy, MetaMask, and SEAL, and is present in two AlienVault OTX threat intelligence pulses. Gridinsoft assigns a trust score of 0/100, further corroborating malicious classification. Fifteen of 91 security vendors on VirusTotal detect the domain as malicious. Infrastructure analysis reveals the use of Cloudflare services, including HTTP/3 and Browser Insights, which may obscure origin details and complicate takedown efforts. The SSL certificate is issued by Google Trust Services (WE1), a common choice for both legitimate and malicious sites. Defenders should prioritize blocking this domain at the network and endpoint levels, particularly in environments where Trust Wallet or cryptocurrency-related activities are conducted. Given the domain's recent creation and active status, monitoring for related infrastructure or newly registered lookalike domains is recommended. The exact content and functionality of the site remain unanalyzed, but the available evidence supports its classification as a high-risk brand impersonation threat.