trust-wallet-aml[.]info

This domain, trust-wallet-aml.info, is identified as a high-risk phishing site designed to impersonate Trust Wallet, a legitimate cryptocurrency wallet service. The site presents itself under the guise of an anti-money laundering (AML) compliance portal, displaying the page title 'TRUST AML' to deceive users into believing they are interacting with an official Trust Wallet verification process. Such impersonation tactics are commonly used to harvest sensitive credentials, including wallet recovery phrases, private keys, or personal identification details, which can lead to unauthorized access and financial theft. The domain’s deceptive design and branding mimicry pose a significant risk to users unfamiliar with legitimate Trust Wallet procedures. Analysis indicates that trust-wallet-aml.info was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on May 27, 2024, not 2026 as initially noted, suggesting a recent and deliberate creation for malicious purposes. The domain resolves to the IP address 66.116.238.108 and is detected by 10 out of 95 security vendors on VirusTotal, reflecting a moderate but concerning level of detection. Additionally, the domain appears on three security blocklists and is actively blocked by multiple threat intelligence platforms. Infrastructure analysis reveals the use of Nginx as the web server and the inclusion of Facebook Pixel, which may be leveraged for tracking user interactions or enhancing the site’s credibility through seemingly legitimate analytics. Users who have visited trust-wallet-aml.info or interacted with its content should take immediate action to mitigate potential risks. First, cease all interaction with the domain and avoid entering any credentials or personal information. If any sensitive data, such as wallet recovery phrases or private keys, was submitted, it is critical to transfer assets to a new, secure wallet immediately. Monitor linked accounts for unauthorized transactions and enable multi-factor authentication where available. Additionally, report the domain to relevant security organizations to contribute to broader threat mitigation efforts. Regularly update security software and remain vigilant for similar phishing attempts targeting cryptocurrency services.