qrtrustwalletv2[.]vercel[.]app

PhishDestroy identifies qrtrustwalletv2.vercel.app as an active brand impersonation domain designed to deceive users into disclosing Trust Wallet credentials or seed phrases. The domain uses the legitimate Vercel hosting platform to host a fraudulent interface that mimics Trust Wallet’s official branding with the goal of capturing sensitive wallet information. Attackers commonly distribute such domains via QR codes, phishing emails, or social media, tricking users into believing they are interacting with the official Trust Wallet service. Users who input their wallet credentials risk losing access to their assets permanently, as impersonation sites often exfiltrate data to attacker-controlled addresses or servers.

This domain was flagged by PhishDestroy with the following indicators and threat intelligence: it resolves to IP 216.198.79.3 and is hosted by Vercel Inc., a legitimate cloud platform often abused in impersonation campaigns due to its fast deployment capabilities. The domain currently shows 0 detections out of 95 scanners on VirusTotal, indicating it remains undetected by many security tools. While the SSL certificate is issued by Google Trust Services, this does not validate the domain’s legitimacy. PhishDestroy continues to investigate this domain under seed f3b1e4 as part of ongoing brand abuse monitoring for Trust Wallet.

If you have visited qrtrustwalletv2.vercel.app, immediately cease any interaction and do not enter any wallet credentials, seed phrases, or private keys. Disconnect from the site and clear your browser cache. Check your Trust Wallet app or official website (trustwallet.com) using a verified and secure connection. If you entered sensitive information, revoke access to any connected apps via the official Trust Wallet interface and consider transferring remaining funds to a new wallet. Report the domain to Trust Wallet’s abuse team and PhishDestroy. Always verify URLs and use official app stores or bookmarks for financial services.