treasurypool-telcoin[.]top

This domain, treasurypool-telcoin.top, is flagged as a crypto drainer operation impersonating Telcoin, a cryptocurrency platform. Analysis indicates the site was designed to deceive users into connecting wallets, enabling unauthorized transfer of digital assets through malicious smart contract interactions. The page title, 'Home | Telcoin,' and visual design elements closely mimic the legitimate Telcoin interface, increasing the likelihood of successful credential and asset compromise. Infrastructure analysis reveals the domain was registered on March 7, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.42.112, hosted behind Cloudflare infrastructure, which provides SSL termination via Let's Encrypt. Detection metrics show 1 of 95 security vendors on VirusTotal flagged the domain, while it appears on three distinct security blocklists. Technologies detected include Cloudflare Browser Insights and HTTP/3, suggesting the use of modern web protocols to evade basic detection mechanisms. The domain is currently offline, likely due to takedown actions or voluntary suspension by the hosting provider. Despite its inactive status, residual risk persists for users who may have interacted with the site prior to its removal. Historical exposure could lead to delayed asset theft if wallet credentials were compromised. Users are advised to revoke any connected wallet permissions associated with this domain and monitor transaction histories for unauthorized activity. Continued vigilance is recommended, as threat actors may re-deploy similar infrastructure under new domains.