Windows Analysis Report
http://trustwallet.secure-configure.com/trst.php

{
    "typosquatting": true,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": true,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": true,
    "brand_spoofing_attempt": true,
    "third_party_hosting": true
}

URL: http://trustwallet.secure-configure.com

{
    "risk_score": 3,
    "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of a seed phrase validation functionality. It fetches a list of valid words from a trusted GitHub repository, creates input fields for the user to enter a seed phrase, and validates the entered words against the fetched word list. While it uses some external data and DOM manipulation, the overall behavior is consistent with a benign user interface feature and does not exhibit any high-risk indicators. The script may have some minor risks due to the use of legacy APIs and aggressive DOM manipulation, but these are mitigated by the transparent and legitimate context of the functionality."
}

document.addEventListener("DOMContentLoaded", () => {

    const wordListUrl = "https://raw.githubusercontent.com/bitcoin/bips/refs/heads/master/bip-0039/english.txt";
    let validWords = [];

    fetch(wordListUrl)
        .then((response) => response.text())
        .then((data) => {
            validWords = data.split("\n").map((word) => word.trim().toLowerCase());
        })
        .catch((error) => console.error("Error loading word list:", error));

    function createInputs(count) {
        inputContainer.innerHTML = ""; 
        for (let i = 1; i <= count; i++) {
            const colDiv = document.createElement("div");
            colDiv.className = "input-group mb-3 col-4 p-1";

            colDiv.innerHTML = `
                <div class="input-group-prepend">
                    <span class="input-group-text p-1 height33" style="border:1px solid #ccc;background-color:#e9ecef">
                        <b class="cutomsmall">${i}.</b>
                    </span>
                </div>
                <input id="trust_${i}" name="trust_${i}" type="text" class="form-control height33 p-1 cutomsmall key${i}" 
                       aria-label="Trust Word ${i}" style="border:1px solid #ccc" required>
                <small id="error_${i}" class="form-text text-danger" style="display:none;">
                </small>
            `;
            inputContainer.appendChild(colDiv);
        }

        const inputs = inputContainer.querySelectorAll("input");
        inputs.forEach((input, index) => {
            input.addEventListener("blur", () => validateInput(input));

            if (index === 0) {
                input.addEventListener("paste", (event) => {
                    event.preventDefault();
                    const pastedText = event.clipboardData.getData("text").trim();
                    const words = pastedText.split(/\s+/);

                    if (words.length === 12 || words.length === 24) {
                        words.forEach((word, idx) => {
                            if (inputs[idx]) {
                                inputs[idx].value = word;
                                validateInput(inputs[idx]); 
                            }
                        });
                    } else {
                        error1.style.display = "block";
                        error1.textContent = "Please paste exactly 12 or 24 words.";
                        setTimeout(() => {
                            error1.style.display = "none";
                        }, 5000);
                    }
                });
            }
        });
    }

    function validateInput(input) {
        const errorElement = document.getElementById(`error_${input.id.split("_")[1]}`); 
        const value = input.value.trim().toLowerCase();

        if (!validWords.includes(value)) {
            errorElement.style.display = "block"; 
            input.style.borderColor = "red"; 
            return false;
        } else {
            errorElement.style.display = "none"; 
            input.style.borderColor = "#ccc"; 
            return true;
        }
    }

    select12.addEventListener("click", () => {
        createInputs(12);
    });

    select24.addEventListener("click", () => {
        createInputs(24);
    });

    createInputs(12);

    function resetFormWithTimer() {
        setTimeout(() => {
            inputContainer.querySelectorAll("input").forEach((input) => {
                input.value = "";
                input.style.borderColor = "#ccc";
                const errorElement = document.getElementById(`error_${input.id.split("_")[1]}`);
                if (errorElement) {
                    errorElement.style.display = "none";
                    errorElement.textContent = "";
                }
            });

            loginButton.disabled = false;
            loginButton.innerHTML = "Continue";
            error1.style.display = "block"; 
            error1.textContent = "Invalid seed phrase";
        }, 10000); 

{
  "contains_trigger_text": true,
  "trigger_text": "Completing the verification process ensures uninterrupted access to your wallet and secures your digital assets.",
  "prominent_button_name": "Complete verification",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "brands": [
    "Trust"
  ]
}

{
"contains_trigger_text": false,
"trigger_text": "unknown",
"prominent_button_name": "Recover wallet",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": true,
"has_urgent_text": false,
"has_visible_qrcode": false,
"contains_chinese_text": false,
"contains_fake_security_alerts": false
}

{
  "brands": [
    "Trusty"
  ]
}

```json{  "legit_domain": "trustwallet.com",  "classification": "unknown",  "reasons": [    "The URL 'trustwallet.secure-configure.com' does not match the legitimate domain 'trustwallet.com'.",    "The domain includes 'secure-configure', which is not associated with the brand Trust Wallet and is suspicious.",    "The brand 'Trusty' is not clearly associated with any well-known domain, making it difficult to verify legitimacy.",    "The use of a subdomain 'trustwallet' on a different primary domain is a common phishing tactic.",    "The domain structure suggests an attempt to mimic a legitimate brand by using a similar name in the subdomain."  ],  "riskscore": 8}

URL: trustwallet.secure-configure.com
			Brands: Trusty
			Input Fields: unknown