Análisis de phishing y seguridad de ttcoi.pages.dev

This domain operates as a cryptocurrency airdrop scam designed to deceive users into believing they can claim legitimate $TC tokens from TTcoin. The site presents itself as an official distribution platform, likely prompting visitors to connect wallets or submit sensitive credentials under false pretenses. Such scams typically harvest private keys, seed phrases, or personal information, enabling attackers to drain funds from victims' crypto wallets or commit identity fraud. Analysis indicates the domain was registered through Cloudflare Pages on May 20, 2026, and remains active as of investigation. Infrastructure review shows it resolves to 172.66.47.152, hosted in Canada under Cloudflare, Inc. VirusTotal reports zero detections across 95 security engines, suggesting the site has not yet been widely flagged. However, it appears on one security blocklist maintained by PhishDestroy. The SSL certificate, issued by Google Trust Services (WE1), provides transport encryption but does not validate legitimacy. Users who visited ttcoi.pages.dev should immediately disconnect any connected wallets and cease all interaction with the site. If credentials or wallet information were entered, revoke any connected dApp authorizations and transfer assets to a new, secure wallet. Monitor accounts for unauthorized transactions and enable multi-factor authentication where possible. Report the domain to relevant security platforms to aid in broader detection efforts. Given the low current detection rate, heightened vigilance is advised when encountering similar airdrop promotions.