trustswallett[.]xyz

trustswallett.xyz has been identified by PhishDestroy as an active phishing domain impersonating Trust Wallet. This domain is currently engaged in brand impersonation attempts to deceive users into divulging sensitive wallet credentials or cryptocurrency funds. The threat remains active as of the latest analysis.

This domain presents multiple indicators of compromise. PhishDestroy analysis confirms that trustswallett.xyz is flagged by 10 of 95 VirusTotal security vendors, indicating a significant risk. The domain was registered through Go Daddy, LLC and resolves to IP address 45.207.163.20. Registered on January 15, 2026, this domain is extremely new and lacks established trust metrics. ZeroSSL GmbH issued its SSL certificate. The elevated risk is further underscored by its recent creation and low blocklist count, suggesting it is actively being deployed in phishing campaigns.

PhishDestroy strongly recommends users avoid interacting with trustswallett.xyz. Enterprises and security teams should implement network-level blocking for this domain and IP address. Users who may have entered credentials should immediately revoke access to all connected wallets and enable two-factor authentication where available. Monitor financial accounts closely for suspicious activity. For continued protection, maintain updated browser security extensions and verify website URLs carefully before inputting sensitive information. Sharing this intelligence with security communities will help prevent further victimization.