trustwalletnqp[.]com

This domain is flagged as a high-risk brand impersonation threat designed to deceive users of Trust Wallet, a cryptocurrency wallet service. Analysis indicates the site mimics legitimate Trust Wallet interfaces to trick victims into entering sensitive credentials, such as recovery phrases or private keys, which could lead to unauthorized access and asset theft. The domain exhibits characteristics consistent with crypto drainer infrastructure, where stolen credentials are used to siphon funds from compromised wallets without user consent. Infrastructure analysis reveals the domain was registered on November 16, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with malicious domains. Security vendors on VirusTotal flagged the domain at a rate of 13/95, indicating moderate to high confidence in its malicious nature. The domain resolves to the IP address 45.205.7.28, hosted in the United States under Fastnet Data INC, and appears on three distinct security blocklists. The SSL certificate, issued by Let's Encrypt (R13), does not mitigate the risk, as malicious actors commonly use valid certificates to lend false legitimacy to phishing sites. Users who visited trustwalletnqp.com should immediately cease all interaction with the domain and any associated links. If credentials or recovery phrases were entered, affected wallets must be considered compromised. Users should transfer remaining assets to a new, secure wallet using a trusted device and monitor all connected accounts for unauthorized transactions. Additionally, browser caches and saved passwords should be cleared to prevent persistent access by malicious scripts. Security teams are advised to block the domain and its resolving IP at the network level to prevent further exposure.