twalletpay[.]com

This domain, twalletpay.com, is identified as a brand impersonation threat specifically targeting Trust Wallet users. The website, which was designed to appear legitimate, featured a page titled 'Trust Wallet Card,' aiming to deceive individuals into believing they were interacting with an official Trust Wallet service. This impersonation could lead to unauthorized access to user accounts, theft of sensitive information, or financial loss if users are tricked into providing their credentials or personal data.

Analysis indicates that twalletpay.com was created on May 23, 2026, and is registered through Hosting Concepts B.V. d/b/a Registrar.eu. The domain resolves to the IP address 35.204.150.5 and has been flagged by 5 out of 95 security vendors on VirusTotal. Additionally, it appears on 3 security blocklists, including MetaMask, PhishDestroy, and SEAL, further emphasizing the elevated risk level. The Gridinsoft trust score for this domain is 0 out of 100, indicating a complete lack of trustworthiness. The website is powered by JouwWeb and Nginx, with an SSL certificate issued by Let's Encrypt.

If users have visited twalletpay.com, they should immediately change their Trust Wallet passwords and enable two-factor authentication (2FA) if not already active. Users are advised to monitor their accounts for any unauthorized transactions or suspicious activities. Additionally, they should report any incidents to their respective financial institutions and Trust Wallet support. To avoid similar threats in the future, users should only access Trust Wallet through official channels and verify the website's URL and SSL certificate carefully.