claim-trust-wallet[.]com

This domain, claim-trust-wallet.com, is flagged as a brand impersonation threat targeting Trust Wallet, a cryptocurrency wallet service. Analysis indicates the site was designed to deceive users into entering sensitive wallet credentials or recovery phrases, likely deploying a cryptocurrency drainer kit to siphon funds from compromised accounts. The domain exhibits classic indicators of phishing infrastructure, including the use of the brand name in the URL to exploit user trust and urgency tactics common in cryptocurrency scams.

Technical indicators confirm the domain's malicious intent. claim-trust-wallet.com was registered on April 8, 2026, through Cloudflare, Inc., and resolves to the IP address 104.21.25.176. Despite its recent creation, the domain appears on three security blocklists and is actively blocked by multiple security providers, including MetaMask, PhishDestroy, and SEAL. VirusTotal reports 0 detections out of 95 engines, suggesting the infrastructure may still evade some automated detection systems. The domain uses a Let's Encrypt SSL certificate, a common tactic to mimic legitimacy and avoid triggering browser security warnings.

As of the latest assessment, claim-trust-wallet.com has been taken offline, likely in response to security interventions or domain suspension. However, the infrastructure remains a residual risk, as threat actors may re-deploy the domain or migrate to newly registered lookalike domains. Users who interacted with the site should assume credential compromise and take immediate action, including revoking wallet access, transferring funds to a secure wallet, and monitoring for unauthorized transactions. Security teams are advised to update blocklists and monitor for related domains leveraging similar naming conventions or infrastructure.