bodytop[.]top

This domain, bodytop.top, poses a significant threat as a brand impersonation scheme specifically targeting Trust Wallet users. The site presents itself as a "REWARD Portal v2 -- Latest Web3 Wallets," tricking visitors into believing they are interacting with a legitimate cryptocurrency reward platform. Instead, it is designed to harvest sensitive information such as wallet credentials, recovery phrases, or private keys, leading to potential financial theft and unauthorized access to digital assets. The deceptive nature of this site, combined with its active status, makes it particularly dangerous for users unfamiliar with phishing tactics in the Web3 space. Analysis indicates that bodytop.top was registered on February 21, 2026, through 耐思尼克国际集团有限公司, a registrar often associated with suspicious domains. The domain resolves to the IP address 209.94.90.1, hosted under AS40680 (Protocol Labs) in the United States. Security vendors on VirusTotal have flagged this domain, with 3 out of 95 engines detecting it as malicious. Additionally, the site appears on one security blocklist, and its SSL certificate is issued by Google Trust Services (WE1), which, while legitimate, does not mitigate the underlying threat. The combination of recent registration, low detection rates, and brand impersonation tactics suggests an evolving campaign designed to evade initial scrutiny. Users who have visited bodytop.top or interacted with its content should take immediate action to mitigate potential risks. First, disconnect any wallets or accounts linked to the site and revoke any suspicious permissions granted to decentralized applications. Next, scan the device used to access the domain for malware or unauthorized software. It is critical to change passwords and recovery phrases for all cryptocurrency wallets, especially if credentials were entered on the site. Monitor wallet activity for unauthorized transactions and report any suspicious behavior to the relevant platform. Finally, users should remain vigilant for follow-up phishing attempts, as attackers may leverage stolen information for further exploitation.