direct-trust-wallet[.]com

PhishDestroy identifies direct-trust-wallet.com as an active brand impersonation threat masquerading as Trust Wallet, a major cryptocurrency wallet service. This domain (direct-trust-wallet.com) is part of a documented phishing campaign designed to deceive users into divulging sensitive wallet credentials or transferring digital assets to attacker-controlled addresses. The threat operates under the guise of a legitimate crypto wallet interface, leveraging visual and functional replication to build trust and trick visitors into entering private keys, seed phrases, or initiating unauthorized transactions through what appears to be a trusted interface. This domain was flagged by only 1 out of 95 VirusTotal security vendors, registered via Cloudflare, Inc., and resolves to IP address 188.114.97.3. The domain was created on May 16, 2026, and secured with a Let's Encrypt SSL certificate, increasing its appearance of legitimacy. While not yet widely blocked in Google Safe Browsing (GSB), its recent creation and low detection rate make it a rising risk. As of this report, PhishDestroy assesses this domain as having an elevated threat level with active impersonation infrastructure. The domain remains active and poses ongoing risk to cryptocurrency users who may encounter it via phishing emails, fake ads, or imposter social media profiles. Users are strongly advised to verify all wallet access points by typing URLs directly or using official Trust Wallet applications. Blocking access to direct-trust-wallet.com and its associated IP is recommended. Remaining risk is elevated due to low initial detection, recent domain age, and high potential for user deception. PhishDestroy continues to monitor and will update indicators as this threat evolves.