trustwalllet[.]us

The domain trustwalllet.us is a confirmed phishing site engaged in brand impersonation targeting Trust Wallet, a cryptocurrency wallet service. This scam site posed as a 'Trustwallet Recovery Program' to deceive users into disclosing sensitive information or transferring cryptocurrency, though no drainer kit was detected. As of the latest verification, trustwalllet.us has been taken offline, but its prior activity classifies it as an elevated-risk threat.

Technical indicators confirm the malicious nature of trustwalllet.us. The domain was flagged by 1 of 95 security vendors on VirusTotal, including SOCRadar, and appeared on 3 security blocklists (PhishDestroy, MetaMask, and SEAL). Registered through Dominet (HK) Limited on February 21, 2026, it resolved to the IP address 64.20.40.251, hosted by Interserver, Inc in the US. The site used a Let's Encrypt SSL certificate (R12) and employed technologies such as WordPress, MySQL, PHP, and jQuery Migrate. Nameservers were dns3002a.trouble-free.net and dns3002b.trouble-free.net, and the observed page title was 'Trustwallet Recovery Program'. Gridinsoft assigned it a trust score of 0/100.

Users who interacted with trustwalllet.us should take immediate safety steps. If cryptocurrency transactions were attempted, revoke all token approvals and transfer remaining funds to a new, secure wallet. For those who entered login credentials, change passwords immediately and enable two-factor authentication on all related accounts. Monitor accounts for unauthorized activity and report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand’s official abuse channels to prevent further victimization.