# checktrustwallet.org — SUSPICIOUS

> PhishDestroy warns of crypto drainer fake Trust Wallet site checktrustwallet.org. 0/95 VirusTotal vendors flagged. Verify domains before clicking.

## Summary
PhishDestroy identifies an active crypto drainer domain impersonating Trust Wallet. The domain checktrustwallet.org was registered on March 29, 2026, and currently resolves to IP 172.67.155.79. This domain is under investigation for brand impersonation targeting Trust Wallet users.  

This domain was flagged by 0 out of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely detected by security tools. The domain is registered through GoDaddy.com, LLC and secured with a Let's Encrypt SSL certificate. It has been observed on 1 security blocklist and is blocked by the Enkrypt extension. The domain’s recent creation date and low detection rate suggest it is a newly deployed threat, likely designed to evade initial scrutiny while targeting cryptocurrency users.  

The current status of this domain is active and under investigation, with no confirmed takedown or widespread blocking at this time. Users are strongly advised to verify the authenticity of any wallet-related domains before entering credentials or making transactions. Trust Wallet’s official domain is trustwallet.com; any deviation from this should be treated as suspicious. PhishDestroy recommends using official channels to verify links and enabling multi-factor authentication for all crypto wallets. If you encounter this domain or similar threats, report it immediately to PhishDestroy for further analysis and potential blocking.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Trust Wallet

## Domain Intelligence
- Registered: 2026-03-29 13:18:25
- Registrar: GoDaddy.com, LLC
- IP: 172.67.155.79

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["Enkrypt"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/7bbd412a-1506-494f-bc10-53e833436ad9
- PhishDestroy: https://phishdestroy.io/domain/checktrustwallet.org/
- LLM endpoint: https://phishdestroy.io/domain/checktrustwallet.org/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/checktrustwallet.org/
Last updated: 2026-03-29