trust-wallet-app[.]to

This domain, trust-wallet-app.to, poses a direct threat to users by impersonating TrustWallet, a legitimate cryptocurrency wallet service. The site mimics the official TrustWallet interface, using an identical page title—'Trust Wallet – The Fast, Secure Crypto Wallet App'—to deceive visitors into entering sensitive credentials, such as wallet recovery phrases or private keys. Once obtained, attackers can gain unauthorized access to victims' cryptocurrency holdings, leading to irreversible financial losses. The site specifically targets users seeking to download or interact with TrustWallet, exploiting trust in the brand to facilitate fraudulent transactions or data theft. Analysis indicates this domain is a confirmed phishing resource. It was registered on November 23, 2025, through NiceNIC International Group Co., Limited, a registrar frequently associated with malicious domains. The domain resolves to the IP address 45.93.20.38, located in Hong Kong, and lacks an SSL certificate, further reducing its legitimacy. Security vendors have flagged the domain as malicious, with 17 out of 95 engines on VirusTotal detecting it as harmful. Additionally, the domain appears on five security blocklists, including PhishDestroy and PhishingDB, and is actively blocked by cryptocurrency-related security tools such as Polkadot and Enkrypt. Users who visited trust-wallet-app.to should assume their credentials or recovery phrases may have been compromised. Immediate action is required: revoke any permissions granted to unknown applications linked to TrustWallet, transfer remaining funds to a new, secure wallet, and generate a fresh recovery phrase. Monitor all connected accounts for unauthorized transactions and enable multi-factor authentication where available. If the site was accessed via a browser, clear cached data and scan the device for malware. Report the incident to the legitimate TrustWallet support team and relevant cybersecurity authorities to aid in tracking and mitigating further abuse.