trust-wallet-transection-1ipay[.]vercel[.]app

This domain operates as a high-risk brand impersonation site targeting Trust Wallet users with a fraudulent USDT transfer interface. The page title "Send USDT" and domain structure mimic legitimate cryptocurrency wallet services, attempting to deceive users into entering sensitive credentials or approving malicious blockchain transactions. Analysis of the infrastructure reveals a direct focus on cryptocurrency theft, with the domain specifically designed to exploit Trust Wallet's branding and user trust in transaction verification processes. Technical indicators confirm the malicious nature of this domain. VirusTotal reports 2 out of 95 security vendors have flagged the domain, while it appears on 2 independent security blocklists. The domain was registered on February 21, 2026, through Tucows Domains Inc., and currently resolves to IP address 216.198.79.3 hosted on Amazon.com, Inc. infrastructure (AS16509). The SSL certificate issued by Google Trust Services (WR1) provides a false sense of security, as the domain's creation date suggests recent deployment specifically for malicious purposes. Users who have visited this domain or interacted with its content should immediately revoke any blockchain approvals granted through the interface, particularly those related to USDT transactions. All credentials entered on the site should be considered compromised and changed across all platforms where they may have been reused. Cryptocurrency wallets used on the site should be audited for unauthorized transactions, and any funds remaining in associated addresses should be transferred to new, secure wallets. Security teams should add the domain and its resolving IP to organizational blocklists, and monitor for similar patterns in domain registration or transaction requests.