trustwallet[.]worldbankio[.]com

This domain is flagged as a high-risk brand impersonation threat targeting Trust Wallet users through credential harvesting and potential malware distribution. Analysis indicates the infrastructure is designed to deceive users into disclosing sensitive wallet access details or downloading malicious payloads under the guise of legitimate Trust Wallet services. The page title "Forfits – Solution" suggests an attempt to mimic official wallet recovery or support pages, a common tactic in cryptocurrency phishing campaigns. Infrastructure analysis reveals the domain trustwallet.worldbankio.com was registered on July 25, 2025, through NAMECHEAP INC and currently resolves to the IP address 184.94.213.23. VirusTotal detection shows 1 out of 95 security vendors flagging the domain as malicious, indicating limited but present recognition of the threat. The SSL certificate is issued by Sectigo Limited, providing a false sense of security while the domain remains active and unblocked by most security platforms. No known blocklist entries or trust score improvements were observed at the time of assessment, suggesting the campaign is still in early deployment or evading detection through low-volume targeting. Mitigation requires immediate action from security teams and end users. Network-level blocking of the domain and its resolving IP 184.94.213.23 should be implemented across firewalls and DNS filters. Users should verify wallet addresses through official Trust Wallet channels only, avoiding any links from unsolicited messages or search results. Organizations should monitor for connections to 184.94.213.23 and investigate any credential submissions to the domain. Trust Wallet users are advised to enable multi-factor authentication and review recent transactions for unauthorized access. Security teams should submit the domain to additional threat intelligence platforms to improve detection coverage across the security community.