trust-web-welcome[.]created[.]app

This domain, trust-web-welcome.created.app, poses a brand impersonation threat designed to deceive users into believing it is the legitimate Trust Wallet platform. The site mimics the official Trust Wallet interface, presenting a page titled 'Trust Wallet | Private & Secure Multi-Chain Crypto Wallet' to trick victims into entering sensitive credentials, such as private keys or recovery phrases. Such impersonation attacks are commonly used to steal cryptocurrency assets by redirecting users to fraudulent wallets or harvesting login details for unauthorized access to legitimate accounts.

Analysis indicates this domain was registered on February 21, 2026, through Tucows Domains Inc. and resolves to the IP address 216.150.16.129, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509). The domain is flagged by 18 out of 95 security vendors on VirusTotal, and it appears on one security blocklist. The SSL certificate is issued by Let's Encrypt (R13), a common practice among threat actors to lend superficial legitimacy to malicious sites. The combination of recent registration, low detection rates, and brand impersonation tactics suggests an active campaign targeting unsuspecting users.

If you visited trust-web-welcome.created.app or entered any credentials, immediately cease all interactions with the site. Revoke access to any connected wallets or applications, and transfer assets to a new, secure wallet. Enable multi-factor authentication on all cryptocurrency-related accounts and monitor for unauthorized transactions. Report the incident to your organization's security team or relevant authorities, and consider submitting the domain to additional threat intelligence platforms to aid in broader detection efforts.