trustwalletagency[.]netlify[.]app

This domain is flagged as a high-risk brand impersonation site targeting users of Trust Wallet, a widely used cryptocurrency wallet. The site presents itself as an official Trust Wallet agency or support platform, likely designed to deceive users into disclosing sensitive information such as recovery phrases, private keys, or login credentials. Such attacks are commonly associated with crypto drainers, where stolen credentials are used to siphon funds from victims' wallets. The use of a familiar brand name increases the likelihood of successful deception, particularly among users seeking support or verification services. Analysis indicates the domain is hosted on Netlify, a legitimate platform often exploited for phishing due to its ease of use and free hosting services. The site is currently active and resolves to the IP address 35.157.26.135, located in Germany on AWS EC2 infrastructure. Only 1 out of 95 security vendors on VirusTotal has flagged this domain as malicious, suggesting it may still evade detection in some security tools. The SSL certificate, issued by DigiCert Inc, is valid and does not raise immediate red flags, further complicating detection. The domain appears on three security blocklists, including those maintained by cryptocurrency-focused security entities, reinforcing its classification as a threat. Users who have visited trustwalletagency.netlify.app or interacted with its content should take immediate action to mitigate potential risks. First, disconnect any connected wallets or sessions linked to the site. If any sensitive information, such as a recovery phrase or private key, was entered, assume the wallet is compromised and transfer remaining assets to a new, secure wallet immediately. Monitor all connected accounts for unauthorized transactions and enable additional security measures, such as two-factor authentication, where applicable. Report the domain to relevant security teams or blocklist providers to aid in broader threat mitigation efforts. Avoid revisiting the site or engaging with any communications claiming to be from Trust Wallet that direct users to unofficial domains.