trustwalletransfer[.]in

This domain, trustwalletransfer.in, is flagged as a high-risk brand impersonation threat targeting Trust Wallet, a cryptocurrency wallet service. Analysis indicates the site mimics Trust Wallet's secure transfer interface, likely designed to harvest credentials or deploy crypto drainer scripts against unsuspecting users. The page title, 'Trust Wallet - Secure Transfer,' reinforces the deception by closely replicating legitimate Trust Wallet branding and functionality prompts. Infrastructure analysis reveals the following technical indicators: the domain was registered on May 21, 2024, through GoDaddy, and currently resolves to the IP address 63.176.8.218, hosted on AWS EC2 in the eu-central-1 region (Germany). VirusTotal detection shows 4 out of 95 security vendors flagging the domain as malicious. The SSL certificate is issued by Let's Encrypt (serial number E7), and the domain appears on one security blocklist. No detections are recorded in Google Safe Browsing at the time of analysis. The domain remains active and unmitigated, posing a persistent risk to users who may encounter it through phishing campaigns or malicious advertisements. Immediate response actions should include blocking the domain at the DNS level, blacklisting the IP address 63.176.8.218, and alerting Trust Wallet's security team for takedown coordination. Users are advised to verify domain authenticity before entering credentials and to enable multi-factor authentication on cryptocurrency wallets to mitigate credential theft risks. Given the domain's recent registration and low blocklist coverage, continued monitoring is required to assess its propagation and potential impact.