trustwalletaml[.]cc

The domain trustwalletaml.cc is actively engaged in brand impersonation, specifically targeting Trust Wallet. The current status of the domain is active, posing a high risk to users who may be misled into believing it is associated with the legitimate brand.

Analysis indicates that trustwalletaml.cc has been flagged by 4 out of 95 security vendors on VirusTotal, suggesting a limited but significant detection rate. The domain is registered through Web Commerce Communications Limited dba WebNic.cc and resolves to the IP address 185.112.145.132. Infrastructure analysis reveals that the domain was created on July 19, 2025, and is currently listed in one threat intelligence pulse on AlienVault OTX. The SSL certificate is issued by Let's Encrypt, which is a common certificate authority used by both legitimate and malicious sites. The page title, 'Your Security and Privacy | Trust,' further contributes to the deceptive nature of the site by mimicking the language and structure of authentic Trust Wallet pages.

Given the active status of trustwalletaml.cc and the potential for high-risk impersonation, it is recommended that users exercise extreme caution when encountering this domain. Security teams should consider adding this domain to their blocklists to prevent access within their networks. Additionally, users should verify the authenticity of any communication or website claiming to be associated with Trust Wallet by cross-referencing with official sources and reporting any suspicious activity to the relevant authorities.