trust-wallets-io[.]pages[.]dev

This domain, trust-wallets-io.pages.dev, operates as a crypto drainer specifically designed to impersonate Trust Wallet, a legitimate cryptocurrency wallet service. The site employs social engineering tactics to deceive users into entering sensitive credentials or approving malicious transactions, leading to unauthorized fund transfers from connected wallets. Analysis indicates the infrastructure is tailored to exploit users familiar with Trust Wallet’s branding, using visually similar interfaces to lower suspicion during interactions. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on March 22, 2026, with an SSL certificate issued by Google Trust Services. Despite its recent creation, the domain has already been flagged on three security blocklists, including MetaMask and PhishDestroy. VirusTotal currently shows 0 detections out of 95 engines, suggesting the threat may still be evading automated detection systems. The domain resolves to the IP address 172.66.44.144 and employs technologies such as HSTS and HTTP/3, which are often used to enhance legitimacy and evade basic filtering mechanisms. Users who visited trust-wallets-io.pages.dev or interacted with its content are advised to take immediate action. Disconnect any wallets linked to the site and revoke all active session approvals via wallet settings. Monitor connected accounts for unauthorized transactions and consider transferring assets to a new, secure wallet. If credentials were entered, assume they are compromised and update passwords for all associated accounts. Report the domain to relevant security teams and blocklists to prevent further exploitation of other users.