trustwalletthk[.]com

Analysis of trustwalletthk.com shows a newly registered domain created on 21 February 2026. The site resolves to 45.207.200.85, an address owned by AS8796 FASTNET DATA INC in the United States. Hosting is served by Nginx with HSTS and HTTP/3 enabled, and the TLS certificate is issued by Let’s Encrypt (R12). DNS resolution uses the shared name servers a8.share-dns.com and b8.share-dns.net, both typical of bulk‑hosting services. The page title returned by the server is “网站筹建中”, which translates to “Website under construction”, and no further content has been observed because the infrastructure is currently offline.

Reputation signals are strongly negative. Gridinsoft assigns a trust score of 0 / 100, and the domain appears on one security blocklist. VirusTotal records 13 of 93 scanners flagging the domain as malicious, confirming a consensus of threat detection. PhishDestroy has already blocked the domain, and the registrar for the registration is Gname.com Pte. Ltd., a provider often used for rapid, low‑cost registrations. The listed scam type is “Crypto Scam” and the site explicitly impersonates the Trust Wallet brand.

Uncertainty remains regarding the exact phishing kit or payload because the site is offline and no page content was captured beyond the title. No additional intelligence from open‑source feeds such as OTX or Safe Browsing is available at this time. Defenders should immediately block 45.207.200.85 and the associated ASN in network firewalls, enforce DNS filtering for trustwalletthk.com, and add the domain to internal allow‑list exclusions for security solutions. Continuous monitoring of the registrar Gname.com Pte. Ltd. and the shared name servers is advised, as they may be reused for future impersonation campaigns.