trustwallet-verify[.]com

trustwallet-verify.com poses a high-risk brand impersonation threat, specifically targeting users of TrustWallet. The domain was designed to deceive users into believing they are interacting with a legitimate TrustWallet verification page, potentially leading to the disclosure of sensitive information such as login credentials, private keys, or other personal data. This impersonation could result in unauthorized access to user accounts, financial loss, and compromised security.

Analysis indicates that trustwallet-verify.com is flagged by 18 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion and potential malicious activity. The domain was registered through ONLINE SAS on May 27, 2026, and resolves to the IP address 38.242.133.238, which is located in France and is part of the AS51167 Contabo GmbH network. The SSL certificate for the domain is issued by Let's Encrypt, and the domain appears on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. These indicators collectively suggest that the domain is part of a sophisticated phishing campaign aimed at leveraging the trust users have in the TrustWallet brand.

If users have visited trustwallet-verify.com, they should immediately change their TrustWallet login credentials and any other passwords that might have been entered on the site. Additionally, users should monitor their financial accounts and transactions for any unauthorized activity. It is recommended to perform a full security scan on their devices and to report any suspicious incidents to the TrustWallet support team. Users should also be cautious of any future communications that direct them to unfamiliar or seemingly official websites, and verify the URLs before entering any sensitive information.