trust-claim[.]cfd

PhishDestroy identifies trust-claim.cfd as an active crypto_drainer phishing domain designed to steal TRON-based cryptocurrency from unsuspecting users. This fraudulent site masquerades as TrixWallet, a legitimate TRON Blockchain Wallet, tricking victims into entering sensitive wallet credentials or initiating unauthorized transactions. The threat actor behind this campaign leverages a recently registered domain (April 26, 2024), a Let's Encrypt SSL certificate for authenticity, and a hosting IP (142.93.103.155) to appear legitimate. Users who interact with this page risk immediate financial loss as their TRX tokens or TRC-20 assets are drained to wallets controlled by the attackers. This domain exhibits multiple red flags confirmed by threat intelligence sources, including a VirusTotal detection rate of 3 out of 95 security vendors, registration through Global Domain Group LLC, and a recently established creation date. The page title ('TrixWallet — TRON Blockchain Wallet') closely mimics the legitimate TrixWallet branding to deceive users. While the domain's infrastructure appears intentionally transient, the crypto_drainer payload is likely distributed via phishing emails, social media impersonation, or malicious ads targeting TRON ecosystem users. Given the high-risk nature of crypto drainers—where funds are irreversibly transferred to attacker-controlled wallets—this threat requires urgent attention from potential victims. If you visited trust-claim.cfd or entered any wallet details, immediately revoke wallet approvals in your TRON wallet settings (e.g., via TronLink or similar extensions), transfer remaining assets to a newly generated wallet address, and scan your device for malware. Report the incident to your wallet provider and local cybercrime units, including transaction hashes or addresses used in the fraud. Avoid reusing seed phrases or private keys, and use hardware wallets for critical assets. Stay vigilant for follow-up phishing attempts exploiting this breach. Seed: 9a31de