trustwalletgwxiazai4[.]org[.]cn

PhishDestroy identifies a newly registered impersonation site operating at trustwalletgwxiazai4.org.cn that masquerades as the legitimate Trust Wallet to steal cryptocurrency from unsuspecting users. This domain was flagged due to its malicious purpose of capturing private keys or wallet credentials and facilitating unauthorized transfers, commonly known as a crypto drainer. This domain was flagged after analysis revealed it impersonates Trust Wallet, a widely used crypto wallet. It was blocked by two leading security tools, SEAL and MetaMask, which serve millions of users. VirusTotal currently shows zero detections out of 95 scanners, indicating it has not yet been widely recognized as malicious. The domain was registered on April 07, 2026 through Alibaba Cloud Computing (Wanwang), just days ago. It resolves to IP address 154.201.165.35 and uses a valid SSL certificate issued by Let’s Encrypt, which may trick users into believing the site is legitimate. If you visited trustwalletgwxiazai4.org.cn or entered any sensitive data, disconnect from the internet immediately and disconnect any connected hardware wallets or mobile devices. Scan all connected devices using updated antivirus and anti-malware software, especially if you logged in or entered recovery phrases. Revoke any connected app permissions or wallet approvals you may have granted to this domain. Contact your wallet provider (Trust Wallet support) and report the incident, change all passwords and seed phrases used on this site, and monitor your crypto wallets for unauthorized transactions. When in doubt, always access Trust Wallet directly through official channels like the verified website or trusted app store listings.