trust-walet[.]app

This domain, trust-walet.app, operates as a brand_impersonation threat targeting cryptocurrency users by replicating the Trust Wallet interface. The site presents itself as a legitimate Web3, NFT, and DeFi wallet provider, using the page title 'Best Crypto Wallet for Web3, NFTs and DeFi | Trust' to deceive visitors into entering sensitive credentials, including private keys or recovery phrases. Analysis indicates the domain is designed to exfiltrate user data to unauthorized third parties, likely for immediate financial theft or long-term account compromise in decentralized finance ecosystems. Infrastructure analysis reveals multiple red flags. The domain was registered on October 22, 2025, through Hosting Concepts B.V. d/b/a Registrar.eu, and resolves to the IP address 82.221.136.47. It appears on one security blocklist and is flagged by 6 out of 95 security vendors on VirusTotal, indicating a consensus on its malicious nature. Additionally, the domain has a Gridinsoft trust score of 0/100, further confirming its high-risk classification. Despite its current offline status, historical activity suggests it may resurface under similar infrastructure or domain variations. Users who visited trust-walet.app should assume their credentials or private keys were compromised. Immediate actions include revoking access to any connected decentralized applications (dApps), transferring assets to a new wallet, and monitoring all linked accounts for unauthorized transactions. It is also recommended to scan local devices for malware, as phishing sites often distribute additional payloads. If recovery phrases were entered, consider the original wallet permanently compromised. Users should report the domain to their wallet provider and relevant security teams to aid in takedown efforts and prevent further exploitation.