tarust-wallet[.]pages[.]dev

The domain tarust-wallet.pages.dev has been identified as a brand impersonation phishing site specifically targeting Trust Wallet users. Its current status is offline, meaning it is no longer accessible, but it posed a significant threat while active. The site was designed to mimic the legitimate Trust Wallet browser extension, using the page title 'Trust Wallet Extension – Enhance Your Crypto Experience®' to deceive visitors into believing it was an official update or download portal.

Analysis of this domain reveals it was registered on April 12, 2026, through Cloudflare, Inc., and hosted on IP address 172.66.44.139. The SSL certificate was issued by Google Trust Services (WE1), lending a false sense of security. Despite being flagged by 1 security blocklist, VirusTotal reported 0 detections out of 95 antivirus engines, indicating that most scanners had not yet identified it as malicious. This low detection rate underscores the importance of proactive threat intelligence.

As the domain is now offline, the immediate risk is mitigated, but users should remain vigilant against similar phishing attempts. PhishDestroy strongly recommends that anyone who may have interacted with tarust-wallet.pages.dev check their accounts for unauthorized transactions and avoid entering sensitive information on unknown sites. Always verify the authenticity of any crypto wallet-related domain by cross-referencing with official sources before engaging.