trust-wallet-mu-nine[.]vercel[.]app

The domain trust-wallet-mu-nine.vercel.app is assessed to pose a high risk due to its brand impersonation threat type, specifically targeting TrustWallet. This domain is actively used to deceive users into believing they are interacting with a legitimate TrustWallet service, potentially leading to the theft of sensitive information such as login credentials and private keys.

Analysis indicates that trust-wallet-mu-nine.vercel.app is flagged by 1 out of 95 security vendors on VirusTotal, suggesting some level of recognition of its malicious intent. The domain is registered through Vercel Inc., a reputable registrar, which may lend a false sense of security to users. The domain resolves to the IP address 64.29.17.3, located in the United States and operated by AS16509 Amazon.com, Inc. Additionally, the SSL certificate is issued by Google Trust Services / WR1, which could further trick users into believing the site is secure. The page title 'Trust Wallet — Личный кабинет' (Trust Wallet — Personal Cabinet) further reinforces the impersonation. The domain is currently listed on three security blocklists: PhishDestroy, MetaMask, and SEAL, indicating ongoing monitoring and recognition by the security community.

To mitigate the risk posed by this domain, users should verify the URL of the TrustWallet site they are accessing and use official channels to log in. Security teams should block this domain at the network level and monitor for any related activity. Additionally, users should be educated on the common tactics of brand impersonation, including the use of similar-looking domain names and trusted SSL certificates, to avoid falling victim to such attacks.