app[.]trustrawallet[.]com

The domain www.app.trustrawallet.com has been identified as a crypto drainer, associated with activities aimed at extracting cryptocurrency from unsuspecting users. There is no specific brand associated with this domain, but its malicious infrastructure indicates it is part of a broader scheme targeting digital wallet users. The domain's online presence raises significant concerns regarding user security and trust.

Technical indicators for www.app.trustrawallet.com reveal a VirusTotal (VT) score of 4 out of 95, meaning that while not all security vendors flag it, a notable minority does recognize the potential threat. The domain was created on March 22, 2026, and is registered through TuringSign Inc., operating under the name Cosmotown. The domain resolves to the IP address 198.251.89.168, and it is currently blocked by one security blocklist, showing its recognition as a threat. According to information from Google Safe Browsing (GSB), the domain is listed, which contributes to its elevated risk assessment.

Currently, the status of www.app.trustrawallet.com is offline, likely due to proactive response actions taken by security entities. However, it is essential to maintain vigilance since the domain may reappear or be relaunched through different infrastructure. The existing risk remains elevated as the potential for future operations targeting cryptocurrency holders exists. Users and network administrators are advised to block this domain and remain cautious of any communications or links associated with it to prevent possible financial loss.