# trustswallett.xyz — MALICIOUS

> trustswallett.xyz mimics Trust Wallet in a confirmed phishing scam. Flagged by 10 of 95 VirusTotal vendors. Check the full report.

## Summary
trustswallett.xyz has been identified by PhishDestroy as an active phishing domain impersonating Trust Wallet. This domain is currently engaged in brand impersonation attempts to deceive users into divulging sensitive wallet credentials or cryptocurrency funds. The threat remains active as of the latest analysis.  

This domain presents multiple indicators of compromise. PhishDestroy analysis confirms that trustswallett.xyz is flagged by 10 of 95 VirusTotal security vendors, indicating a significant risk. The domain was registered through Go Daddy, LLC and resolves to IP address 45.207.163.20. Registered on January 15, 2026, this domain is extremely new and lacks established trust metrics. ZeroSSL GmbH issued its SSL certificate. The elevated risk is further underscored by its recent creation and low blocklist count, suggesting it is actively being deployed in phishing campaigns.  

PhishDestroy strongly recommends users avoid interacting with trustswallett.xyz. Enterprises and security teams should implement network-level blocking for this domain and IP address. Users who may have entered credentials should immediately revoke access to all connected wallets and enable two-factor authentication where available. Monitor financial accounts closely for suspicious activity. For continued protection, maintain updated browser security extensions and verify website URLs carefully before inputting sensitive information. Sharing this intelligence with security communities will help prevent further victimization.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Trust Wallet

## Domain Intelligence
- Registered: 2026-01-15 12:00:47
- Registrar: Go Daddy, LLC
- IP: 45.207.163.20

## Detection Status
- VirusTotal: 10 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/trustswallett.xyz
- PhishDestroy: https://phishdestroy.io/domain/trustswallett.xyz/
- LLM endpoint: https://phishdestroy.io/domain/trustswallett.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/trustswallett.xyz/
Last updated: 2026-04-09