trustwallet-promo.site
Appeared in the .site zone on Saturday, August 29, 2026; by the end of that day the census found active website. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The name 'trustwallet-promo' is an unambiguous brand-squat of Trust Wallet combined with the classic crypto-giveaway 'promo' lure, yet the site currently serves an unrelated mirror of a Russian aluminium-facade company (fasad-stroy.com, forms posting offsite to that host) — a shared-hosting default on Timeweb, not Trust Wallet content. No deception is presented to a visitor yet, so this is a brand-squat parked ahead of a likely wallet-drainer promo page rather than an active phish.
The domain trustwallet-promo.site uses Trust Wallet branding in its name but serves entirely unrelated content: a Russian facade construction company (fasad-stroy.com). The form posts to the construction company's server, not capturing wallet credentials. This is a brand-squat/typosquat with hijacked or repurposed hosting—the 'promo' suffix and wallet brand name suggest intent to deceive visitors seeking Trust Wallet, but the actual page shows no phishing attempt, only misdirection to unrelated
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Saturday, August 29, 2026
Same data as JSON: /api/zone/domain/trustwallet-promo.site. This page is not indexed by search engines and does not link to the site it describes.