tru-stwallet-us-en[.]created[.]app

This domain, tru-stwallet-us-en.created.app, is flagged for brand impersonation targeting Trust Wallet, a cryptocurrency wallet service. Analysis indicates the site presented itself as a legitimate 2025 review portal titled 'Trust Wallet Review 2025 | Features, Safety & Benefits,' designed to deceive users into engaging with malicious content. No explicit drainer kit signatures were identified, but the infrastructure aligns with common cryptocurrency scam patterns, including the use of modern web frameworks to mimic authentic platforms. Infrastructure analysis reveals multiple technical indicators of compromise. The domain was registered on February 21, 2026, through Tucows Domains Inc., and resolves to IP address 216.150.16.1. It holds a VirusTotal detection score of 5/95 security vendors, appears on one security blocklist, and has a Gridinsoft trust score of 0/100. The SSL certificate is issued by Let's Encrypt, and the site employed technologies such as Node.js, React, Next.js, and Google Cloud CDN, suggesting a scalable, cloud-based deployment. Google Safe Browsing (GSB) previously blocked this domain, and it was proactively flagged by PhishDestroy. As of the latest assessment, tru-stwallet-us-en.created.app has been taken offline, reducing immediate exposure to end users. However, residual risk persists due to the domain's recent creation date and the potential for re-activation or migration to alternative infrastructure. Users who interacted with the site are advised to monitor cryptocurrency wallets for unauthorized transactions, revoke any connected dApp permissions, and verify future communications exclusively through Trust Wallet’s official channels. Organizations should maintain blocklist updates and monitor for similar domain registrations using the seed pattern '6dda4a' or variations of the brand name.