secured[.]tradeassured[.]info

This domain, secured.tradeassured.info, is identified as a crypto wallet drainer specifically designed to impersonate Trust Wallet, a widely used cryptocurrency wallet service. The site presents itself as a legitimate Trust Wallet transfer portal, tricking users into entering sensitive credentials or approving malicious transactions. Once accessed, the infrastructure is engineered to siphon cryptocurrency assets by exploiting wallet connection prompts or phishing for recovery phrases, leading to immediate and irreversible financial loss for victims. The page title, 'Transfer Trust Wallet,' directly reinforces the deception by mimicking official wallet transfer workflows, increasing the likelihood of user engagement with the fraudulent interface. Analysis of the domain reveals multiple high-confidence technical indicators confirming its malicious nature. The domain was registered on May 21, 2026, through HOSTINGER operations, UAB, a registrar frequently associated with recently deployed phishing infrastructure. It appears on two independent security blocklists and is flagged by 5 out of 95 security vendors on VirusTotal, including detections for brand impersonation and crypto-related fraud. The domain resolves to the IP address 188.114.96.3, which is part of a network known for hosting high-risk domains leveraging Cloudflare services. Detected technologies include jsDelivr for content delivery, Cloudflare Browser Insights for user tracking, and HTTP/3 for performance optimization—commonly observed in sophisticated phishing campaigns aiming to evade detection and enhance user interaction. Users who visited secured.tradeassured.info or interacted with its content are at elevated risk of asset compromise. Immediate action is required: disconnect any connected wallets from the site, revoke all active smart contract approvals via a trusted blockchain explorer, and transfer remaining assets to a new, secure wallet. Monitor transaction history for unauthorized activity and report the domain to relevant security platforms to aid in broader threat mitigation. Avoid entering any recovery phrases or private keys into untrusted interfaces, and verify domain authenticity through official channels before conducting any wallet-related operations. Given the domain’s current offline status, users should remain vigilant for similar impersonation attempts using lookalike domains or social engineering tactics.