trustwallet-send[.]in[.]bnbscan[.]org

This domain, trustwallet-send.in.bnbscan.org, is currently flagged as an active brand impersonation threat specifically targeting TrustWallet, a widely used cryptocurrency wallet service. The site presents itself as a legitimate TrustWallet interface, likely designed to deceive users into disclosing sensitive credentials or executing unauthorized transactions. Analysis indicates this is not a generic phishing attempt but a targeted impersonation of a trusted crypto wallet brand, increasing its potential impact on unsuspecting users. Infrastructure analysis reveals the domain was registered on May 01, 2025, through TUCOWS.COM, CO. It resolves to the IP address 192.64.80.67, hosted by Interserver, Inc (AS19318) in the United States. The domain appears on three security blocklists and is flagged by 2 of 95 security vendors on VirusTotal. A Let's Encrypt SSL certificate (YR1) is in place, providing a superficial layer of legitimacy. The page title "Wallet" further mimics TrustWallet's branding, while the domain structure incorporates elements resembling legitimate blockchain explorers, enhancing its deceptive appearance. As of this assessment, trustwallet-send.in.bnbscan.org remains active and unmitigated. Users are strongly advised to avoid interacting with this domain or any associated links. Organizations should immediately block the domain and its resolving IP (192.64.80.67) at the network level. TrustWallet users should verify all communications through official channels and enable multi-factor authentication on their accounts. Security teams are recommended to monitor for additional domains registered through the same registrar or resolving to the same IP, as these may indicate further impersonation attempts.