Highscore 55 · flagged Tuesday, October 20, 2026

xn--trustwalet-kyb.com

Appeared in the .com zone on Tuesday, October 20, 2026; by the end of that day the census found redirect not followed. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

punycode name
matched: trustwaļlet scripts=LATIN
+18
brand in the name
matched: trustwallet
+10
lure words (login, verify, secure…)
matched: wallet
+26
brand name redirects elsewhere
matched: pocket1.click
+8
Registrar
—
Nameserver provider
Nameservers
ns1.dyna-ns.net, ns2.dyna-ns.net
First-day state
redirect not followed
HTTP status
301
Page title
—
Has a form
no
Brand echoed
trustwallet

Model opinions

Second opinionlooks like abusetarget: Trust Walletconfidence 85%· claude-opus-5-5

The punycode name is a homoglyph of trustwallet (trustwaļlet) and serves no content of its own; it 301-redirects to a pocket1.click affiliate link that lands on Pocket Option, an offshore binary-options platform. This is a deceptive brand-squat that funnels Trust Wallet traffic to a high-risk trading site, not a credential phish.

First passlooks like phishingtarget: Trust Walletconfidence 92%· claude-haiku-4-5

The punycode domain xn--trustwalet-kyb.com impersonates Trust Wallet (a legitimate cryptocurrency wallet) with a deliberate misspelling. It redirects to pocket1.click, which displays 'Pocket Option' branding and a trading platform lure—a classic bait-and-switch that captures victims searching for Trust Wallet and funnels them to a fraudulent trading platform. The nameservers (dyna-ns.net) are generic abuse infrastructure, and all 9 outbound links point to pocketoption.com, indicating coordinated

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, October 20, 2026

Screenshot of xn--trustwalet-kyb.com taken by the zone census on 2026-10-20

Same data as JSON: /api/zone/domain/xn--trustwalet-kyb.com. This page is not indexed by search engines and does not link to the site it describes.