trust-wallet[.]to

The domain trust-wallet.to was registered on 21 February 2026 and presently resolves to the IPv4 address 178.16.54.12, which is assigned to AS202412 Omegatech LTD in the Netherlands. The site’s page title is identical to the domain name, and the host is listed as a known crypto‑related scam infrastructure. VirusTotal scans show that twelve of ninety‑three security engines flagged the domain as malicious, and the SSL certificate is rated R12, indicating a low‑trust certificate. Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the suspicion.

The domain appears on two independent security blocklists and has been actively blocked by both PhishDestroy and ScamSniffer. AlienVault OTX records the domain in a single threat‑intelligence pulse, linking it to brand‑impersonation activity targeting Trust Wallet users. The overall risk level is elevated, and the campaign is classified as a crypto scam.

The domain is currently offline, which limits direct observation of its content, but the combination of registration timing, hosting attributes, low trust scores, and multiple detections strongly suggests a purposeful attempt to deceive Trust Wallet users. Defenders should continue to block the associated IP address, ensure that the domain and its IP are added to local deny lists, monitor for any re‑registration attempts, and watch for related indicators such as the R12 certificate fingerprint or similar hostnames targeting the same brand. Ongoing intelligence sharing with blocklist operators is recommended to keep the detection coverage up to date.