publictrustwallet[.]com

Analysis indicates that publictrustwallet.com is an active brand‑impersonation site targeting Trust Wallet users. The domain is registered via GoDaddy.com, LLC and uses the authoritative name servers ns71.domaincontrol.com and ns72.domaincontrol.com. DNS resolution points to 172.235.150.69, an IP owned by Akamai Technologies, Inc. in the United States. The web server returns HTTP 200 and presents a Let’s Encrypt / YE1 TLS certificate, which does not provide any indication of malicious intent but confirms the domain is publicly reachable over HTTPS. VirusTotal reports five of ninety‑one security vendors flagging the domain, and the site is listed on three external blocklists, including PhishDestroy, MetaMask, and SEAL. The intelligence confirms the campaign’s objective is to impersonate Trust Wallet, but no additional payload or credential‑harvesting details have been disclosed. Uncertainty remains regarding the exact phishing page content, the presence of any malicious scripts, and whether the infrastructure is shared with other campaigns. Defenders should block the domain at network perimeter, update URL filtering policies, and monitor DNS queries for the associated IP and name‑server records. Incident response teams should treat any credentials submitted to the site as compromised and advise affected users to reset Trust Wallet credentials immediately.