cn-trustwallet[.]at

The domain cn-trustwallet.at is identified as a brand impersonation threat targeting Trust Wallet and is currently offline. This domain poses a high risk to users who may inadvertently access it, believing it to be the official Trust Wallet website.

Analysis indicates that cn-trustwallet.at has been flagged by 12 of 95 security vendors on VirusTotal, suggesting a significant level of suspicion regarding its legitimacy. The domain is registered with Proton66 OOO, an entity based in Russia (RU), and resolves to the IP address 193.143.1.166. The domain was created on April 29, 2026, and is listed on three security blocklists, including PhishDestroy, MetaMask, and SEAL. The page title, 'Trust Wallet 2026 - 安全Web3钱包官方下载指南,' translates to 'Trust Wallet 2026 - Official Download Guide for a Secure Web3 Wallet,' further reinforcing its attempt to deceive users into thinking it is an official Trust Wallet resource. The SSL certificate is issued by Let's Encrypt, which is a common practice among phishing sites to gain user trust.

Given the current status of the domain being offline, it is recommended that users exercise caution and avoid visiting this domain even if it becomes active again. Security teams should continue to monitor the domain for any signs of reactivation and consider adding it to their internal blocklists to prevent accidental access. Additionally, users should always verify the URL of the official Trust Wallet website and use trusted methods to download and update their wallets to avoid potential security breaches.