starrtfaq-trzox-home[.]square[.]site

The domain starrtfaq-trzox-home.square.site has been identified as a high-risk crypto drainer, designed to illicitly extract digital assets from connected wallets. Analysis confirms the domain is currently offline, though prior activity targeted users through deceptive wallet connection prompts and transaction manipulation. No legitimate brand impersonation was detected; the threat operates as a standalone malicious infrastructure. Infrastructure analysis reveals the domain was registered through MarkMonitor Inc. on February 5, 2019, and resolves to the IP address 74.115.51.5. Security vendors have flagged this domain in 14 of 95 VirusTotal scans, while it appears on three independent security blocklists. The SSL certificate is issued by Let’s Encrypt, a common but not exclusive indicator of malicious domains. Additional technical indicators include a Gridinsoft trust score of 0/100 and a page title reading 'Just a moment...', a pattern observed in transient phishing deployments. Given the domain’s current offline status, immediate interaction risks are mitigated; however, threat actors may redeploy similar infrastructure. Users are advised to verify wallet connections against official sources, monitor transaction histories for unauthorized activity, and implement browser-based security extensions that block known malicious domains. Network administrators should update firewall rules to deny traffic to the resolved IP and associated indicators, while security teams should correlate logs for prior connections to this domain.