trustwallet-ype[.]com

This domain, trustwallet-ype.com, is identified as a high-risk brand impersonation resource targeting Trust Wallet, a widely used cryptocurrency wallet service. Analysis indicates the domain was designed to deceive users into disclosing sensitive credentials, likely through a fraudulent interface mimicking the legitimate Trust Wallet platform. While no specific drainer kit signatures have been confirmed, the infrastructure aligns with known cryptocurrency phishing campaigns observed in recent months. Infrastructure analysis reveals the domain was registered on November 22, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with malicious domains. It resolves to the IP address 154.219.125.3, hosted under AS8796 (FASTNET DATA INC) in the United States. Detection metrics show the domain is flagged by 16 out of 95 security vendors on VirusTotal, with additional listings on three specialized blocklists: PhishDestroy, MetaMask, and SEAL. The domain’s SSL certificate, issued by Let’s Encrypt (R12), provides minimal assurance, as it is commonly exploited in phishing operations to lend superficial legitimacy. No detections were recorded in Google Safe Browsing at the time of analysis. The domain is currently offline, likely due to takedown actions or voluntary suspension by the hosting provider. Despite its inactive status, residual risk remains for users who may have interacted with the domain during its operational window. Organizations and individuals are advised to monitor for unauthorized transactions or credential exposure, particularly if the domain was accessed prior to deactivation. Proactive measures, including credential rotation and review of connected wallet permissions, are recommended to mitigate potential compromise. Further monitoring of associated infrastructure, such as the IP address 154.219.125.3, is warranted to identify related malicious activity.