trustscanr[.]com

This domain, trustscanr.com, is flagged for brand impersonation targeting Trust Wallet, a cryptocurrency wallet service. Analysis indicates the site hosts a fraudulent Anti-Money Laundering (AML) verification page, a common tactic to harvest user credentials and private keys under the guise of compliance checks. The page title, 'Trust Wallet AML,' directly mimics legitimate wallet security procedures, increasing the likelihood of user deception. No drainer kit signatures were identified in the initial scan, but the presence of advanced frontend frameworks suggests potential obfuscation techniques to evade detection. Infrastructure analysis reveals the domain was registered on April 07, 2026, through Spaceship, Inc., with a Gridinsoft trust score of 0/100. VirusTotal reports 1/95 security vendors flagging the domain as malicious, while it appears on a single security blocklist. The domain resolves to the IP address 89.125.187.103, hosted on a server running Node.js, Ubuntu, and Nginx, with frontend technologies including React, Vue.js, Next.js, and Webpack. These frameworks are frequently used in both legitimate and malicious applications, but their combination here aligns with patterns observed in phishing infrastructure designed for scalability and rapid deployment. As of the latest assessment, trustscanr.com has been taken offline, likely due to enforcement actions or hosting provider intervention. The domain was previously blocked by at least one security feed, and its resolution to a high-risk IP further corroborates its malicious intent. Despite its current offline status, residual risk remains due to the domain's recent registration and the possibility of re-emergence under altered infrastructure. Users who interacted with the site prior to takedown are advised to revoke any connected wallet permissions, rotate credentials, and monitor for unauthorized transactions. Organizations should update blocklists to include the domain and associated IP to prevent future access attempts.