trustwallets[.]xyz

The domain trustwallets.xyz is a dangerous phishing site designed to impersonate the legitimate Trust Wallet cryptocurrency wallet service. By mimicking the official brand, attackers attempt to trick users into entering their recovery phrases, private keys, or login credentials, which would then be stolen. This type of brand impersonation is particularly insidious because victims often believe they are interacting with a trusted platform, leading to irreversible loss of funds. The risk is high, as the site was actively promoted and designed to look convincing.

PhishDestroy's analysis reveals several red flags that confirm the malicious nature of trustwallets.xyz. The domain was created on June 12, 2026, and is registered through GMO Internet Group, Inc. d/b/a Onamae.com. It resolves to IP address 13.248.169.48 and appears on three security blocklists. VirusTotal shows that 11 out of 95 security vendors flag this domain as malicious, and AlienVault OTX has found it in three threat intelligence pulses. Additionally, its SSL certificate is issued by GoDaddy, but this does not guarantee legitimacy—phishing sites routinely obtain certificates. The site has already been taken offline, but users may still be at risk if they visited it before takedown.

If you have visited trustwallets.xyz, do not enter any information. Immediately change your Trust Wallet password and revoke any permissions granted to the site. Run a security scan on your device for malware. If you entered your recovery phrase, assume your wallet is compromised and transfer all assets to a new wallet with a new phrase. Monitor your accounts for suspicious activity and enable two-factor authentication wherever possible. Stay vigilant against similar phishing attempts by always verifying URLs and using official channels only.