# usdttrustwallet.com — SUSPICIOUS

> usdttrustwallet.com is a brand impersonation site mimicking Trust Wallet. Flagged by 1 of 95 VirusTotal vendors. Avoid this crypto drainer immediately.

## Summary
PhishDestroy identifies active brand impersonation activity linked to the domain usdttrustwallet.com, which closely mirrors Trust Wallet to deceive users. This malicious infrastructure poses as a legitimate crypto wallet service to facilitate credential theft and potential fund misappropriation. The campaign remains active, with threat actors leveraging social engineering tactics to lure victims into disclosing sensitive wallet information or approving fraudulent transactions.  This domain was flagged by 1 of 95 VirusTotal security vendors, indicating limited but present detection coverage. The domain was registered through GoDaddy.com, LLC, resolving to IP address 172.67.172.137. Notably, the domain was created on March 21, 2026, and secured with a Let's Encrypt SSL certificate to enhance perceived legitimacy. While current blocklist counts are unspecified, the low VirusTotal detection ratio suggests this threat may evade some security controls.  Organizations and individual users should immediately block usdttrustwallet.com at the network perimeter and endpoint levels. Exercise heightened scrutiny when accessing Trust Wallet services, verifying URLs through official channels. Users who may have interacted with this domain should audit their wallet credentials, revoke any unauthorized approvals, and monitor for anomalous transaction activity. Proactive threat hunting for related infrastructure is strongly advised to prevent further exploitation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Trust Wallet

## Domain Intelligence
- Registered: 2026-03-21 07:42:56
- Registrar: GoDaddy.com, LLC
- IP: 172.67.172.137

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/fa61e67b-4f1d-4e52-8f3a-ace336c976eb
- PhishDestroy: https://phishdestroy.io/domain/usdttrustwallet.com/
- LLM endpoint: https://phishdestroy.io/domain/usdttrustwallet.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/usdttrustwallet.com/
Last updated: 2026-03-23