trustwalett[.]wixstudio[.]com

PhishDestroy identifies trustwalett.wixstudio.com as an active phishing domain impersonating Trust Wallet to steal cryptocurrency. The site mimics the wallet’s branding to trick users into entering seed phrases or private keys, which attackers immediately harvest. Visitors are shown counterfeit login pages hosted on Wix subdomains, often arriving through spoofed emails or social media links that appear to come from Trust Wallet support. Consequences include drained wallets, irreversible fund loss, and exposure of additional personal data harvested from fake “support” forms. Never enter recovery phrases or private keys on any unexpected site. This domain was flagged by 3 of 95 VirusTotal security vendors and already appears on two public blocklists used by MetaMask and SEAL. PhishDestroy analysis shows the domain resolves to IP address 34.144.206.118, relies on a Let’s Encrypt SSL certificate for legitimacy, and remains actively serving pages. The registrar is Wix.com, which has not yet suspended the subdomain despite multiple community reports. Creation date and full WHOIS history suggest the campaign started within the last two weeks and continues to evolve with new subpages. Always verify the exact URL in browser address bars and use official Trust Wallet apps or bookmarked sites only. If you visited trustwalett.wixstudio.com—or any page asking for recovery phrases—immediately disconnect from the internet, revoke any session tokens visible in browser developer tools, and transfer remaining funds to a new wallet via a clean device. Run a full antivirus scan, rotate all passwords you may have reused, and report the incident to Trust Wallet’s official security channel. Screenshot the page URL and store it for evidence; do not click any links on the page. Forward suspicious messages to Trust Wallet’s phishing inbox and warn your contacts to avoid the domain. Stay alert: legitimate wallet providers never ask for seed phrases outside their official applications.