trustwalletadmin[.]web[.]app

The domain trustwalletadmin.web.app is classified as a high-risk threat due to its brand impersonation of TrustWallet. This domain is actively involved in deceiving users by mimicking legitimate support pages, a common tactic used to gather sensitive information under false pretenses.

This domain was registered through Google LLC and is currently hosted on an IP address located in the United States, specifically 199.36.158.100 under AS54113 by Fastly, Inc. The domain is secured with an SSL certificate from Google Trust Services / WR4, which can lend a false sense of security to users. VirusTotal reports that 13 out of 95 security vendors have flagged this domain, indicating a significant concern within the cybersecurity community. It appears on three recognized security blocklists, namely PhishDestroy, MetaMask, and SEAL. Despite these alerts, the domain remains active and poses ongoing risks to unsuspecting users.

To mitigate risks associated with this brand impersonation threat, users should avoid engaging with the domain and report it to relevant security platforms if encountered. Organizations and users should ensure their security software is up-to-date and reference security blocklists to preemptively block such domains. Stakeholders of TrustWallet are advised to inform their users about this impersonation attempt and provide guidance on verifying legitimate contact points. Continuous monitoring and awareness are key to defending against such deceptive practices.