trazorn-walletm[.]webflow[.]io

This domain is assessed at high risk due to its classification as a crypto drainer, a specific threat type designed to deceive users into connecting their cryptocurrency wallets and authorizing malicious transactions that drain funds. Unlike generic phishing, this attack targets wallet connection interfaces, often impersonating legitimate decentralized applications or wallet services.

Technical indicators confirm the threat. VirusTotal reports 2 out of 95 security vendors flagging this domain as malicious. The domain was created on May 08, 2013, and registered through MarkMonitor, Inc., a legitimate registrar. It resolves to IP address 172.64.151.8, which is associated with Cloudflare's CDN infrastructure. The SSL certificate is issued by Google Trust Services, indicating the site uses HTTPS to appear trustworthy. The page title 'Trazorn walletm' suggests brand impersonation of a cryptocurrency wallet service. The domain remains active at the time of analysis.

To mitigate exposure to this crypto drainer, users should never connect their cryptocurrency wallets to untrusted websites. Verify the legitimacy of any wallet service by checking official domain names through trusted sources. Use browser extensions that block known malicious domains. Enable transaction preview features in wallets to review and reject suspicious outgoing transactions. Report the domain to relevant threat intelligence platforms and block network traffic to 172.64.151.8 and the domain trazorn-walletm.webflow.io on firewalls or proxy servers.