trust29[.]top

The domain trust29.top is a phishing site engaged in brand impersonation targeting Trust Wallet users. It presents itself as a 'REWARD Portal v2 - Latest Web3 Wallets' to deceive victims into connecting their cryptocurrency wallets, posing an elevated risk of unauthorized access or asset theft. No drainer kit was identified, but the site specifically mimics Trust Wallet, a well-known cryptocurrency wallet service. As of the latest verification, trust29.top has been taken offline.

Technical indicators confirm the malicious nature of trust29.top. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and Gridinsoft, which assigned it a trust score of 0/100. It appears on 1 security blocklist (PhishDestroy) and was registered through NiceNIC International Group Co., Limited on October 07, 2025. The domain resolves to the IP address 209.94.90.1, hosted in the US under AS40680 (Protocol Labs), and uses Cloudflare nameservers (coen.ns.cloudflare.com and tia.ns.cloudflare.com). No SSL certificate was issued for the site, and Google Safe Browsing has not flagged it at this time.

Victims who interacted with trust29.top should immediately revoke any token approvals granted to the site via their wallet settings and transfer funds to a new, secure wallet. Enable two-factor authentication (2FA) on all accounts, even if no credentials were entered, as a precaution. Monitor transaction histories for unauthorized activity and report the domain to platforms like PhishTank, Google Safe Browsing, or the impersonated brand (Trust Wallet) to aid in takedown efforts.