wallet[.]trust-web[.]co

wallet.trust-web.co is a subdomain of trust-web.co. PhishDestroy first observed the hostname on Aug 28, 2026. The hostname uses “wallet,” a pattern consistent with a wallet lure; no target brand is confirmed from stored content. Current evidence score: 66/100 (high).

Positive findings are stored from 5 sources: VirusTotal, MetaMask, SEAL, Spamhaus DBL, and URLQuery. VirusTotal recorded 4 detections among 91 engines: ChainPatrol, alphaMountain.ai, Forcepoint ThreatSeeker, Gridinsoft on Aug 28, 2026 at 14:10 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 28, 2026 at 14:20 UTC. Spamhaus DBL: DBL_PHISH on Aug 28, 2026 at 14:30 UTC. URLQuery recorded 2 detections; no observation timestamp was retained. Non-positive and contextual checks: Google Safe Browsing returned no flag on Aug 28, 2026 at 15:17 UTC. URLScan captured the page on Aug 28, 2026 at 14:05 UTC.

The collector marked the hostname reachable on Aug 28, 2026 at 14:05 UTC, but did not retain the HTTP response code. Registration records for the registrable domain trust-web.co list GoDaddy.com, LLC as the registrar and Aug 25, 2026 as the creation date. Registration preceded first observation by 3 days. At collection time, the hostname resolved to 212.224.107.21 on AS214036 (Ultahost, Inc.). The recorded endpoint location is Neu-Isenburg, DE. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists Let's Encrypt as the certificate issuer.

The content indicators and 5 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.