trustt-tools-enn[.]pages[.]dev

The domain trustt-tools-enn.pages.dev is currently under investigation for brand impersonation, specifically targeting the Trust Wallet brand. The risk level is currently assessed as under investigation, indicating that while the domain has been identified as potentially malicious, the full extent of its threat is still being evaluated.

Infrastructure analysis reveals that the domain was created on March 29, 2026, and is registered through Cloudflare, Inc. It resolves to the IP address 172.66.46.222 and employs technologies such as HSTS, Cloudflare, and HTTP/3. The SSL certificate is issued by Google Trust Services. The domain has a Gridinsoft trust score of 0/100, indicating a high level of suspicion. Despite this, VirusTotal has not flagged the domain with 0/95 detections. The domain appears on three security blocklists and is blocked by MetaMask, PhishDestroy, and SEAL. The page title, 'Trust Wallet — Secure Multi-Currency Crypto Wallet,' closely mimics the legitimate Trust Wallet page, which is a strong indicator of brand impersonation.

To mitigate the risk posed by this domain, users are advised to verify the URL of any Trust Wallet-related pages they visit. Security solutions such as MetaMask, PhishDestroy, and SEAL should be updated to include the latest blocklists. Organizations should monitor their networks for any connections to this IP address and block them if detected. Additionally, users should be educated on the importance of checking SSL certificates and trust scores before entering sensitive information on any web page.