trustwxallet[.]com

This domain, trustwxallet.com, is identified as a high-risk brand impersonation resource specifically targeting Trust Wallet, a widely used cryptocurrency wallet platform. Analysis indicates the site was designed to distribute malicious Android application packages (APKs) under the guise of legitimate Trust Wallet software. The page title, written in Simplified Chinese, explicitly references Trust Wallet downloads for Android devices, suggesting a targeted campaign aimed at users seeking mobile wallet installations. No direct evidence of a specific drainer kit was observed in the available metadata, though the infrastructure aligns with known crypto-drainer distribution patterns. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain was registered on February 21, 2026, through West263 International Limited, a registrar frequently associated with abusive registrations. It resolves to the IP address 156.243.14.63, hosted under AS40065 (CNSERVERS LLC) in Hong Kong, a network segment with a history of hosting fraudulent crypto-related domains. The SSL certificate is issued by TrustAsia Technologies, Inc. via LiteSSL RSA CA 2025, providing a superficial layer of legitimacy. Detection metrics show the domain is flagged by 17 out of 95 security vendors on VirusTotal and appears on three independent security blocklists, including PhishDestroy, MetaMask, and SEAL. Google Safe Browsing (GSB) does not currently list the domain, though this may reflect its recent takedown rather than benign status. As of the latest verification, trustwxallet.com has been taken offline, likely due to enforcement actions by hosting providers or domain registrars. However, the underlying threat infrastructure remains a concern. The domain's creation date in 2026 suggests potential typosquatting or pre-registration for future abuse, and the use of a Chinese-language landing page indicates a focused regional threat vector. Users who may have interacted with the domain are advised to revoke any associated wallet permissions, monitor transaction histories for unauthorized activity, and avoid downloading APKs from untrusted sources. Given the high-risk classification, continued vigilance is recommended, particularly for users in the targeted demographic.