unaware-bronze-xlyojfebfy-cnnyuckffb[.]edgeone[.]app

This domain, unaware-bronze-xlyojfebfy-cnnyuckffb.edgeone.app, is identified as a high-risk crypto drainer. The domain poses a significant threat to users by attempting to deceive them into revealing sensitive information such as private keys and wallet addresses, which can lead to unauthorized access and potential loss of cryptocurrency assets. The page title, 'Tron USDT DApp - imToken & Token Pocket Ready,' suggests that the domain is specifically targeting users of these popular cryptocurrency wallets, making it appear legitimate and trustworthy.

Analysis indicates that the domain is registered through Tencent EdgeOne, a cloud service provider, and has been flagged by 2 out of 95 security vendors on VirusTotal. The domain resolves to the IP address 43.168.176.154, which is located in Germany (DE) and is associated with the autonomous system AS139341 ACE. The SSL certificate for the domain is issued by DigiCert, Inc., under the DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1, enhancing the deceptive nature of the website by providing a secure connection that may falsely reassure users. Additionally, the domain appears on one security blocklist, further confirming its malicious intent.

If users have visited this domain, they should immediately check their cryptocurrency wallets for any unauthorized transactions or changes. It is recommended to change any associated passwords and enable two-factor authentication (2FA) if it is not already active. Users should also monitor their accounts for any unusual activity and consider contacting their wallet provider for additional security guidance. To prevent future incidents, users should be cautious when clicking on links from unknown sources and verify the legitimacy of websites before entering any sensitive information.