trustwallet[.]tjgege[.]com

PhishDestroy identifies trustwallet.tjgege.com as a live brand-impersonation domain targeting the Trust Wallet crypto application. The site parades under a name designed to deceive users searching for the legitimate app, offering a plausible vector for credential theft and cryptocurrency theft. As of the latest scan, the domain remains under investigation yet shows no signs of deactivation, indicating an active and ongoing threat.

This domain was flagged by internal analysis and resolves to IP 154.89.71.215. It is registered through Gname.com Pte. Ltd., carries a Let’s Encrypt SSL certificate, and shows 0 detections out of 95 engines on VirusTotal. The domain was created on September 22, 2013, suggesting an attempt to leverage age as a trust signal while concealing true ownership identity. No entries were found on known public blocklists or threat-intel feeds, leaving many security tools unaware of the danger.

Brand-impersonation domains like trustwallet.tjgege.com rely on typographic and visual deception to trick users seeking the official Trust Wallet site. Victims may enter their recovery phrases or private keys, handing full control to the attackers. Users should never enter sensitive wallet data on unverified domains. Always navigate directly to the official trustwallet.com web address or use the authentically signed mobile application. Block or report this domain via local hosts files or network controls. Report impersonation attempts to Trust Wallet’s official security channels to accelerate takedown and protect the broader community.