inter-trustweb[.]wixstudio[.]com

The domain inter-trustweb.wixstudio.com has been identified as a brand impersonation threat specifically targeting Trust Wallet, a cryptocurrency wallet service. Analysis indicates this domain was designed to deceive users into believing they are interacting with legitimate Trust Wallet infrastructure. The domain is currently offline, though prior activity suggests it was actively used in a phishing campaign to harvest credentials or distribute malicious payloads. Technical indicators confirm the elevated risk level of this domain. It was flagged by 2 of 95 security vendors on VirusTotal, a relatively low detection rate that may reflect the domain's short-lived or evasive nature. The domain was registered through GoDaddy.com, LLC, a widely used registrar, and resolved to the IP address 34.144.206.118. Notably, the domain's creation date is listed as April 04, 2026, which appears anomalous and may indicate falsified registration data or a placeholder entry. The domain appears on three security blocklists, and its SSL certificate was issued by Let's Encrypt, a common choice for both legitimate and malicious sites. Additional infrastructure analysis reveals that the domain was blocked by multiple security mechanisms, including MetaMask and PhishDestroy, further corroborating its malicious intent. The current status of inter-trustweb.wixstudio.com is offline, reducing immediate risk to end users. However, the domain's infrastructure and registration details suggest it could be reactivated or replaced with a similar domain. Users and organizations are advised to treat any future communications or domains associated with this infrastructure as malicious. Network administrators should ensure that the IP address 34.144.206.118 is blocked at the perimeter level, and security teams should monitor for domains with similar naming patterns or registration characteristics. End users who may have interacted with this domain should immediately revoke any associated permissions, rotate credentials, and scan their systems for potential compromise. Given the domain's targeting of cryptocurrency users, heightened vigilance is recommended for financial transactions and wallet security.