rot[.]transactionshield[.]info

The domain rot.transactionshield.info is currently active and is identified as a high-risk brand impersonation threat targeting Trust Wallet. The domain is actively impersonating the Trust Wallet brand to deceive users and potentially steal sensitive information.

Analysis indicates that rot.transactionshield.info has been flagged by 4 out of 95 VirusTotal vendors, suggesting that it is recognized as a malicious entity by a significant number of security providers. The domain was created on May 20, 2026, and is registered through HOSTINGER operations, UAB. It resolves to the IP address 172.67.160.78, which is located in CA and is associated with Cloudflare, Inc. The domain has appeared on 2 security blocklists, including PhishDestroy and ScamSniffer. The SSL certificate is issued by Google Trust Services / WE1, which may be used to lend a false sense of security to users.

Given the current active status of rot.transactionshield.info and the evidence of brand impersonation, it is strongly recommended that users avoid interacting with this domain. Security teams should monitor and block access to this domain to prevent potential data breaches and financial losses. Additionally, considering the involvement of Cloudflare, Inc., and the relatively recent creation date, ongoing investigation into the infrastructure and associated domains is advised to mitigate broader risks.