trust-wal-tension[.]pages[.]dev

trust-wal-tension.pages.dev is a phishing domain that conducted brand impersonation targeting Trust Wallet users in a cryptocurrency scam. The page presented itself with the title Trust Wallet Extension | Secure Your Crypto on Any Browser to deceive visitors into believing it was an official extension. trust-wal-tension.pages.dev has since been taken offline by its operators or hosting provider.

Analysis of trust-wal-tension.pages.dev reveals detections by 1 of 95 VirusTotal vendors including Ermes with Google Safe Browsing not flagging the domain. It was registered through Cloudflare Inc. with a creation date of 2025-11-04 00:00:00 and resolves to the IP address 188.114.97.3. The SSL issuer is Google Trust Services / WE1 and the domain is listed on 3 security blocklists such as PhishDestroy MetaMask and SEAL. Technologies include HSTS Cloudflare and HTTP/3 with an HTTP status of 403.

Individuals exposed to this phishing site should revoke token approvals granted to any suspicious contracts and move assets to a fresh wallet. Monitoring for fraudulent transactions and reporting the incident to wallet providers and blocklist maintainers helps mitigate further risks. Changing passwords and enabling two-factor authentication on related accounts adds layers of security.