test3[.]transactionshield[.]info

The domain test3.transactionshield.info is currently flagged as a high-risk brand impersonation threat targeting TrustWallet users. Registered through HOSTINGER operations, UAB, this domain resolves to the IP address 172.67.160.78 and presents a page titled 'Transfer Trust Wallet,' directly mimicking the TrustWallet brand. Analysis indicates the domain remains active as of July 12, 2026, with no evidence of takedown or mitigation efforts. Security vendors have detected malicious activity associated with this domain, with 6 out of 95 engines on VirusTotal flagging it as harmful. Additionally, the domain appears on three distinct security blocklists and is explicitly blocked by at least three independent threat detection systems. The SSL certificate, issued by Google Trust Services, does not mitigate the risk, as legitimate certificates are frequently abused in phishing campaigns to lend false credibility. Infrastructure analysis reveals that the domain is designed to deceive users into believing they are interacting with a legitimate TrustWallet transfer portal. The combination of brand impersonation, active blocking by security tools, and a Gridinsoft trust score of 0/100 strongly suggests malicious intent. Defenders should treat this domain as a confirmed threat and implement blocking measures at the network and endpoint levels. Organizations should also monitor for any attempts to access this domain from internal systems, as it may indicate compromised credentials or ongoing phishing attempts targeting users.