Fake Trust Wallet 'Blue Moon' $50,000 giveaway on edgeone.dev subdomain asks for wallet secrets
MalwareTips reports a Trust Wallet Blue Moon giveaway scam: a counterfeit promotion with TRUST branding advertising a $50,000 reward pool and inviting visitors to connect a wallet. The page is hosted at cwave-nsdfuz4s…
- First reported
- Reports
- 1
Source: malwaretips.com · published

What happened
MalwareTips reports a Trust Wallet Blue Moon giveaway scam: a counterfeit promotion with TRUST branding advertising a $50,000 reward pool and inviting visitors to connect a wallet. The page is hosted at cwave-nsdfuz4saj.edgeone.dev, not trustwallet.com. The reported version shows a connection error, then offers 'manual linking' through a credential form requesting wallet secrets such as a recovery phrase. Trust Wallet is the impersonated service, not the operator; EdgeOne is the hosting platform. MalwareTips did not submit information to the form.
How the scam works
Wallet-drainer lures copy a familiar crypto brand and offer something free: a vote reward, an airdrop, an early-supporter allocation or a trading bonus. The visitor is directed to a 'Connect Wallet' button. Connecting alone usually only shares a public address, but the next prompts can ask for a signature, a token approval or a transfer, and these may be labelled as a claim or vote. An approval or signed permission can let the operator move tokens later without asking again, and blockchain transfers are rarely reversible.
MalwareTips says the right response depends on what was actually approved. Someone who only viewed the page has less to do than someone who signed a transaction or typed a recovery phrase. Check your wallet history or a blockchain explorer, revoke any token permissions you don't recognise, and if a recovery phrase was entered, move the remaining funds to a new wallet. Find claims and events only through a project's official website and verified accounts.
The 'manual linking' step is the giveaway: after a fake connection error, the page asks for the recovery phrase directly, which gives full control of the wallet. Trust Wallet is impersonated and is not involved, and EdgeOne is only the hosting platform.
Source
MalwareTips, "Trust Wallet Blue Moon Giveaway Scam" (published 25 October 2026).
Red flags
- A Trust Wallet 'giveaway' with a large prize pool on a site that isn't trustwallet.com.
- A connection error followed by a 'manual linking' form.
- Any request for a recovery phrase or private key.
- Pages hosted on generic platforms such as edgeone.dev subdomains.
If you were targeted
- 1Don't enter anything on cwave-nsdfuz4saj.edgeone.dev.
- 2Never type a recovery (seed) phrase or private key into a website or give it to 'support'.
- 3Check announcements only through the project's official website or accounts that you open yourself.
- 4If you connected and approved something, revoke the token approval with your wallet's or the network's approval tool and move remaining assets to a new wallet if you're unsure what you signed.
- 5If you disclosed a recovery phrase, treat the wallet as compromised and move assets to a new wallet created with a new phrase.
- 6Report the site to your wallet provider and, in the U.S., to the FBI's IC3 at ic3.gov.