trustwallet[.]uk[.]com

Analysis confirms that trustwallet.uk.com is actively used for brand impersonation of Trust Wallet. The domain resolves to the IPv4 address 185.178.208.163 and is serviced by the nameservers ns1.ddos-guard.net and ns2.ddos-guard.net, indicating reliance on a DDoS‑mitigation provider. VirusTotal records show that 10 of 91 scanned security engines have flagged the domain, suggesting the presence of malicious components. The domain is currently listed as active, and no additional intelligence such as page content or observed payloads has been released. Because the domain mimics a well‑known cryptocurrency wallet, any unsolicited communications that reference Trust Wallet should be treated as suspicious. Defenders should block DNS resolution to 185.178.208.163 and enforce outbound filtering for HTTP/S traffic to the domain. Email security gateways should add trustwallet.uk.com to block or quarantine lists, especially for messages attempting credential collection. Continuous monitoring of network logs for connections to the identified IP or to the DDoS‑guard nameservers is recommended. Threat intel feeds should be updated with the seed 18e60f to ensure correlation with future observations. Until further forensic detail is obtained, the domain should be considered high‑risk and excluded from legitimate traffic.