trust-walet-web[.]created[.]app

This domain, trust-walet-web.created.app, is identified as a brand impersonation threat specifically targeting Trust Wallet, a cryptocurrency wallet service. Analysis indicates the site was designed to mimic the official Trust Wallet Chrome extension, likely to deploy crypto drainer malware or harvest credentials from unsuspecting users seeking Web3 access. The page title, 'Trust Wallet Extension for Chrome | Official Access to Web3,' reinforces the deception by falsely claiming official status, a common tactic in crypto-related phishing campaigns. Technical indicators confirm the malicious nature of this domain. It is flagged by 19 out of 95 security vendors on VirusTotal, and appears on at least one security blocklist. The domain was registered through Tucows Domains Inc. and resolves to the IP address 216.150.1.193, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites. The domain was created on February 21, 2026, an anomalous future date that may indicate registry manipulation or an attempt to evade detection. No Google Safe Browsing (GSB) hits were reported at the time of analysis, though this does not diminish the elevated risk posed by the domain. The domain is currently offline, likely due to takedown actions or voluntary suspension. It was blocked by PhishDestroy, a security response system, which may have contributed to its deactivation. Despite its offline status, residual risk remains for users who may have interacted with the domain prior to its takedown. Organizations and individuals are advised to monitor for unauthorized transactions, revoke access to any suspicious browser extensions, and verify the authenticity of crypto wallet applications directly through official sources. Network defenders should update blocklists to include this domain and its associated IP to prevent future access attempts.