trustwallet-transaction-a9f0f135c303fedbff7fdc5c4562b609[.]pages[.]dev

This domain constitutes a high-risk brand impersonation threat targeting Trust Wallet users through a fraudulent transaction interface. Analysis indicates the page employs a deceptive redirect mechanism, as evidenced by the "Redirecting..." page title, designed to harvest credentials or manipulate users into executing unauthorized cryptocurrency transfers. The infrastructure mimics legitimate Trust Wallet workflows, likely leveraging social engineering to exploit victims during purported transaction confirmations or wallet recovery processes.

Technical indicators confirm the domain's malicious intent. The domain trustwallet-transaction-a9f0f135c303fedbff7fdc5c4562b609.pages.dev, registered through Cloudflare Pages on April 02, 2026, resolves to IP address 172.66.47.102, hosted by Cloudflare, Inc. in Canada. VirusTotal detection rates stand at 2/95 security vendors, while the domain appears on three distinct security blocklists. The SSL certificate, issued by Let's Encrypt (serial number E8), provides encrypted communication, a common tactic to evade basic scrutiny. Additional protective measures, such as those implemented by PhishDestroy, MetaMask, and SEAL, have blocked access to this domain, further validating its malicious classification.

Users who have interacted with this domain should immediately revoke any connected wallet permissions and cease all transactions. It is critical to verify wallet addresses through official channels and monitor for unauthorized access. If credentials were entered, users must transfer assets to a new, secure wallet and conduct a thorough audit of all linked accounts. Enabling multi-factor authentication on all cryptocurrency-related services is strongly recommended to mitigate future risks. No further interaction with the domain or any associated links should occur, and any suspicious activity should be reported to relevant security teams for investigation.