tw-event[.]org

The domain tw-event.org is flagged as a brand impersonation threat targeting Trust Wallet. Analysis indicates that this domain was used to deceive users by mimicking the appearance and functionality of the legitimate Trust Wallet website, potentially to steal credentials or personal information.

Technical indicators reveal that the domain was registered through Global Domain Group LLC on April 16, 2026. It resolves to the IP address 104.21.29.136 and has been detected by 3 out of 95 security vendors on VirusTotal, indicating a limited but notable level of suspicious activity. The domain has a Gridinsoft trust score of 0/100, which is the lowest possible rating, and it appears on one security blocklist. The technologies detected on this domain include HSTS, Google Analytics, Cloudflare Browser Insights, and Cloudflare, suggesting the use of sophisticated web infrastructure to enhance the credibility and functionality of the impersonation. Additionally, the domain supports HTTP/3, which can improve user experience and potentially mask malicious activities.

As of the current analysis, the domain tw-event.org has been taken offline, likely due to coordinated efforts by security researchers and domain authorities. While the domain is no longer active, the potential risk remains as the underlying infrastructure and techniques used may still be operational under different domains. Users are advised to remain vigilant and verify the URLs of websites they visit, especially those related to financial or sensitive information. Security teams should monitor for similar domains and IP addresses to prevent further incidents and ensure that all security blocklists are updated with this information.