trustwallet-backup[.]com

PhishDestroy identifies trustwallet-backup.com as a high-risk domain actively impersonating Trust Wallet's official services. This domain specifically targets cryptocurrency users by mimicking the brand’s secure backup portal, tricking victims into entering their unique seed phrases (e.g., 300d69) into a fraudulent interface. The threat is immediate and severe, as stolen seeds grant attackers full control over users' wallets and funds. This domain was flagged by 12 out of 95 VirusTotal security vendors, indicating substantial malicious activity. It resolves to IP address 188.114.97.3 and leverages a Google Trust Services SSL certificate to appear legitimate. Registered through Internet Domain Service BS Corp., the domain was created on April 10, 2026, highlighting its recency and opportunistic nature. The fraudulent page title, 'Trust Wallet — Secure Backup Portal,' further reinforces the impersonation attempt. Given its high-risk classification and active status, this domain poses a critical threat to Trust Wallet users seeking legitimate backup solutions. To mitigate exposure, users must avoid accessing trustwallet-backup.com under any circumstances. Instead, they should only use Trust Wallet’s official website (trustwallet.com) or verified applications for backup procedures. Organizations should block this domain at the network perimeter and update firewall rules to prevent internal access. Additionally, users who may have interacted with this domain should immediately transfer their funds to a new wallet with a different seed phrase and enable two-factor authentication where possible. Reporting this domain to Trust Wallet’s abuse team can further help in disrupting malicious campaigns targeting their user base.