trustwdallet[.]com

This domain is flagged at an elevated risk level for brand_impersonation, specifically targeting Trust Wallet users through a fraudulent Android application download portal. Analysis indicates the site mimics the official Trust Wallet platform to distribute malicious software under the guise of legitimate wallet downloads. Infrastructure analysis reveals the domain was registered on February 21, 2026, through West263 International Limited. It resolves to IP address 156.243.14.55, hosted in Hong Kong under AS40065 (CNSERVERS LLC). VirusTotal reports 11 out of 95 security vendors detecting the domain as malicious. The domain appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by TrustAsia Technologies, Inc. via LiteSSL RSA CA 2025. The page title, written in Chinese, translates to "TrustWallet wallet download Android app - TrustWallet official download - Global leading digital currency trading wallet," further confirming the impersonation attempt. Mitigation steps for this brand_impersonation threat include immediate blocking of the domain and its associated IP (156.243.14.55) at the network perimeter. Organizations should update endpoint detection rules to flag any downloads originating from this domain or its IP. Users should be educated to verify official download sources through Trust Wallet’s authenticated channels and avoid third-party app repositories. Security teams should monitor for related domains registered through the same registrar (West263 International Limited) or hosted on the same AS (AS40065) to preemptively block similar threats.