trcscan[.]website

This domain, trcscan.website, is identified as a generic phishing site impersonating Verdulería Tenta, a legitimate entity. Analysis indicates the site was designed to harvest user credentials or sensitive information through deceptive login portals or forms. No specific drainer kit signatures were detected in initial scans, though the infrastructure aligns with common phishing toolkits leveraging obfuscated JavaScript and redirect chains. Technical indicators confirm the domain was registered on March 22, 2026, through Dynadot Inc, resolving to IP address 188.114.97.3. VirusTotal reports 13 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The site appears on three security blocklists, including MetaMask and PhishDestroy, and employs a Let's Encrypt SSL certificate alongside Cloudflare and HTTP/3 for traffic obfuscation. No Google Safe Browsing (GSB) detections were recorded at the time of analysis. The domain is currently offline, likely due to takedown actions or infrastructure suspension. However, residual risk persists as threat actors may re-deploy the phishing kit under a new domain or IP. Users who interacted with the site should assume credential exposure and initiate password resets for associated accounts. Organizations are advised to monitor for related domains using the same registrar or hosting patterns, particularly those mimicking regional businesses with localized page titles.