trust-wallet-app-lern-us[.]square[.]site

This domain, trust-wallet-app-lern-us.square.site, is confirmed as a brand impersonation scam targeting Trust Wallet, a cryptocurrency wallet service. Analysis indicates the site was designed to deceive users into believing they were interacting with the legitimate Trust Wallet platform, likely to harvest credentials or distribute malicious payloads. No specific drainer kit signatures were identified, but the infrastructure aligns with common phishing tactics used in cryptocurrency fraud schemes. Infrastructure analysis reveals the following technical indicators: the domain was flagged by 4 out of 95 security vendors on VirusTotal, registered through MarkMonitor Inc., and resolved to the IP address 74.115.51.5. The domain was created on February 05, 2019, and appears on 3 security blocklists. It was hosted on Amazon Web Services with Cloudflare protection and used a Let's Encrypt SSL certificate. The domain was blocked by multiple security platforms, including MetaMask and PhishDestroy, and was listed as offline at the time of assessment. The domain is currently offline, reducing immediate risk to users. However, the historical infrastructure and registration details suggest a deliberate attempt to impersonate Trust Wallet. Remaining risks include potential reuse of the domain or migration of the phishing campaign to a new domain with similar characteristics. Users are advised to verify domain authenticity before interacting with any cryptocurrency-related services and to monitor for unauthorized access to their wallets or credentials. Security teams should maintain blocklist updates to prevent future access to this or related domains.