Windows Analysis Report
https://trustwallet.secure-configure.com/trst.php/

{
    "typosquatting": true,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": true,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": true,
    "brand_spoofing_attempt": true,
    "third_party_hosting": true
}

URL: https://trustwallet.secure-configure.com

{
    "risk_score": 3,
    "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of a seed phrase validation functionality. It fetches a list of valid words from a trusted GitHub repository, creates input fields for the user to enter a seed phrase, and validates the entered words against the fetched word list. While it uses some external data and DOM manipulation, the overall behavior is consistent with a benign user interface feature and does not exhibit any high-risk indicators. The script may have some minor risks due to the use of legacy APIs and aggressive DOM manipulation, but these are mitigated by the transparent and legitimate context of the functionality."
}

document.addEventListener("DOMContentLoaded", () => {

    const wordListUrl = "https://raw.githubusercontent.com/bitcoin/bips/refs/heads/master/bip-0039/english.txt";
    let validWords = [];

    fetch(wordListUrl)
        .then((response) => response.text())
        .then((data) => {
            validWords = data.split("\n").map((word) => word.trim().toLowerCase());
        })
        .catch((error) => console.error("Error loading word list:", error));

    function createInputs(count) {
        inputContainer.innerHTML = ""; 
        for (let i = 1; i <= count; i++) {
            const colDiv = document.createElement("div");
            colDiv.className = "input-group mb-3 col-4 p-1";

            colDiv.innerHTML = `
                <div class="input-group-prepend">
                    <span class="input-group-text p-1 height33" style="border:1px solid #ccc;background-color:#e9ecef">
                        <b class="cutomsmall">${i}.</b>
                    </span>
                </div>
                <input id="trust_${i}" name="trust_${i}" type="text" class="form-control height33 p-1 cutomsmall key${i}" 
                       aria-label="Trust Word ${i}" style="border:1px solid #ccc" required>
                <small id="error_${i}" class="form-text text-danger" style="display:none;">
                </small>
            `;
            inputContainer.appendChild(colDiv);
        }

        const inputs = inputContainer.querySelectorAll("input");
        inputs.forEach((input, index) => {
            input.addEventListener("blur", () => validateInput(input));

            if (index === 0) {
                input.addEventListener("paste", (event) => {
                    event.preventDefault();
                    const pastedText = event.clipboardData.getData("text").trim();
                    const words = pastedText.split(/\s+/);

                    if (words.length === 12 || words.length === 24) {
                        words.forEach((word, idx) => {
                            if (inputs[idx]) {
                                inputs[idx].value = word;
                                validateInput(inputs[idx]); 
                            }
                        });
                    } else {
                        error1.style.display = "block";
                        error1.textContent = "Please paste exactly 12 or 24 words.";
                        setTimeout(() => {
                            error1.style.display = "none";
                        }, 5000);
                    }
                });
            }
        });
    }

    function validateInput(input) {
        const errorElement = document.getElementById(`error_${input.id.split("_")[1]}`); 
        const value = input.value.trim().toLowerCase();

        if (!validWords.includes(value)) {
            errorElement.style.display = "block"; 
            input.style.borderColor = "red"; 
            return false;
        } else {
            errorElement.style.display = "none"; 
            input.style.borderColor = "#ccc"; 
            return true;
        }
    }

    select12.addEventListener("click", () => {
        createInputs(12);
    });

    select24.addEventListener("click", () => {
        createInputs(24);
    });

    createInputs(12);

    function resetFormWithTimer() {
        setTimeout(() => {
            inputContainer.querySelectorAll("input").forEach((input) => {
                input.value = "";
                input.style.borderColor = "#ccc";
                const errorElement = document.getElementById(`error_${input.id.split("_")[1]}`);
                if (errorElement) {
                    errorElement.style.display = "none";
                    errorElement.textContent = "";
                }
            });

            loginButton.disabled = false;
            loginButton.innerHTML = "Continue";
            error1.style.display = "block"; 
            error1.textContent = "Invalid seed phrase";
        }, 10000); 

{
  "contains_trigger_text": true,
  "trigger_text": "Completing the verification process ensures uninterrupted access to your wallet and secures your digital assets.",
  "prominent_button_name": "Complete verification",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
"contains_trigger_text": false,
"trigger_text": "unknown",
"prominent_button_name": "Recover wallet",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": true,
"has_urgent_text": false,
"has_visible_qrcode": false,
"contains_chinese_text": false,
"contains_fake_security_alerts": false
}

{
  "brands": [
    "Trust"
  ]
}

{
  "brands": [
    "Trusty"
  ]
}

```json{  "legit_domain": "trustwallet.com",  "classification": "unknown",  "reasons": [    "The URL 'trustwallet.secure-configure.com' does not match the legitimate domain 'trustwallet.com'.",    "The domain 'secure-configure.com' is not associated with Trust Wallet, which is a well-known cryptocurrency wallet brand.",    "The use of 'secure-configure' in the domain is suspicious and often used in phishing attempts to create a false sense of security.",    "The brand 'Trusty' is unknown and does not match the well-known brand 'Trust Wallet'.",    "The URL structure suggests a potential phishing attempt by using a subdomain to mimic a legitimate brand."  ],  "riskscore": 9}
Google indexed: False