trust-wallet-flasher[.]vercel[.]app

This domain, trust-wallet-flasher.vercel.app, is flagged as an active brand impersonation threat targeting Trust Wallet, a widely used cryptocurrency wallet service. Analysis indicates the site presents itself as a "Trust Wallet Flasher Tool," a fabricated utility likely designed to deceive users into interacting with malicious smart contracts or disclosing sensitive wallet credentials. The domain does not appear to host a known crypto drainer kit at this time, but its branding and page structure closely mimic legitimate wallet recovery or enhancement tools, increasing the likelihood of successful social engineering attacks. Infrastructure analysis reveals the following technical indicators: the domain was registered on April 11, 2026, through Vercel Inc., and resolves to the IP address 216.198.79.67. It holds a VirusTotal detection score of 4/95 security vendors, indicating limited but growing awareness within the security community. The domain is secured with an SSL certificate issued by Google Trust Services, a common tactic to lend false legitimacy. It appears on three security blocklists and is actively blocked by at least three major threat intelligence platforms, including MetaMask and PhishDestroy. No association with Google Safe Browsing (GSB) was detected at the time of analysis. The domain remains active and poses an elevated risk to users unfamiliar with Trust Wallet’s official communication channels. Response actions should include immediate blocking of the domain and IP at the network level, along with user education to verify wallet-related tools exclusively through official Trust Wallet documentation or support channels. Despite its low detection rate, the domain’s targeted impersonation of a trusted crypto brand and its presence on multiple blocklists justify heightened monitoring and proactive mitigation. Users who have interacted with this domain should revoke any connected wallet permissions and monitor for unauthorized transactions.