trustwallzt[.]com

The domain trustwallzt.com is identified as a confirmed brand impersonation site targeting Trust Wallet, a cryptocurrency wallet service. Analysis indicates this domain was designed to deceive users into believing it was an official Trust Wallet platform, facilitating credential theft or unauthorized transactions. The domain is currently offline, but prior activity and infrastructure details confirm its malicious intent. Infrastructure analysis reveals trustwallzt.com was registered through Gname.com Pte. Ltd. on November 12, 2025, and resolved to the IP address 45.205.7.30, hosted in the United States under Fastnet Data INC. The domain was flagged by 17 of 95 security vendors on VirusTotal, indicating widespread detection as malicious. It appeared on three security blocklists and was preemptively blocked by multiple threat intelligence platforms. The SSL certificate, issued by Let's Encrypt (R13), was a standard Domain Validation (DV) type, offering no additional trust indicators. While trustwallzt.com is currently offline, the domain remains a documented threat due to its prior use in brand impersonation campaigns. Organizations and users are advised to maintain blocklist entries for this domain and monitor for any reactivation. Network administrators should inspect logs for connections to 45.205.7.30 or related domains registered through the same registrar. Users who may have interacted with this domain should verify wallet integrity, revoke any suspicious permissions, and report the incident to relevant security teams for further investigation.