trustwallet[.]vg

The domain trustwallet.vg has been identified as a brand impersonation threat, specifically targeting the Trust Wallet brand to deceive cryptocurrency users. This site, titled 'Trust Connect,' was designed to mimic legitimate wallet services in order to steal credentials or drain crypto assets. The domain was registered through NiceNIC International Group Co., Limited and is associated with an SSL certificate from domainerschoice and tc138.traffic.club, indicating a connection to traffic distribution networks often used in phishing campaigns.

Technical analysis reveals several red flags. VirusTotal reports that 6 out of 95 security vendors flag this domain as malicious, and it appears on 3 security blocklists. The domain was created on February 21, 2026, and resolves to IP address 188.114.97.3. While Google Safe Browsing status is not explicitly mentioned, the presence on multiple blocklists and vendor flags strongly suggests malicious intent. The registration date and use of a privacy-focused registrar are typical of phishing operations.

As of the latest check, trustwallet.vg is offline, which suggests it has been taken down or is temporarily inactive. However, the risk remains that similar domains may appear, and users who previously interacted with the site may still be at risk of credential theft or follow-up attacks. PhishDestroy advises users to avoid any unsolicited links claiming to be from Trust Wallet, always verify URLs carefully, and enable two-factor authentication on legitimate crypto accounts. No further action is required from users regarding this specific domain, but vigilance is recommended.