trustwalletsinvest[.]com

PhishDestroy identifies trustwalletsinvest.com as an active brand impersonation site targeting Trust Wallet users. The domain relies on social engineering to trick victims into depositing cryptocurrency into attacker-controlled wallets. No drainer kit artifacts are visible yet, but the page layout mimics Trust Wallet’s official site, including branding and color scheme, to build false credibility. The page is static and does not host malware directly, but it funnels deposits to fraudulent addresses under the attacker’s control. Domain registration data shows a recent creation date of October 06, 2025, indicating a newly deployed operation likely designed to capitalize on Trust Wallet’s reputation during a period of high user activity. This domain resolves to IP address 82.29.199.148 and is registered through GoDaddy.com, LLC. VirusTotal currently shows 2/95 detections, meaning no antivirus engines have flagged the site yet. The SSL certificate is issued by Let’s Encrypt, providing a false sense of security. Google Safe Browsing (GSB) status remains unlisted, and blocklist aggregators have not yet added the domain. This low detection rate combined with recent registration makes the site particularly dangerous to unsuspecting users who may assume it is legitimate due to the trusted branding and valid SSL certificate. As of this report, trustwalletsinvest.com remains active and unblocked by major security vendors. Immediate remediation is required through domain takedown requests to GoDaddy and SSL revocation with Let’s Encrypt. Users are advised to avoid visiting the site entirely and to report it to Trust Wallet’s official fraud channels and local cybercrime units. Remaining risk is high due to low detection coverage and the site’s recent deployment, which suggests ongoing operational activity. Trust Wallet users should verify all investment offers via official communication channels only.