truzoom[.]app

This domain is flagged as an active cryptocurrency wallet phishing site targeting users through deceptive interfaces designed to harvest private keys or seed phrases. Analysis indicates the site mimics legitimate wallet services to trick visitors into entering sensitive credentials, which are then transmitted to threat actors for unauthorized access to digital assets. The infrastructure supports high-risk activity, as evidenced by its inclusion on multiple security blocklists and targeted detection by cryptocurrency security tools. Infrastructure analysis reveals the domain was registered on May 27, 2026, through Porkbun LLC, a registrar commonly associated with newly established phishing campaigns. It resolves to the IP address 44.227.76.166 and has been flagged by 3 out of 95 security vendors on VirusTotal, alongside explicit blocking by three independent security blocklists. The discrepancy in the creation date (2026) suggests potential domain pre-registration or incorrect WHOIS data, a tactic occasionally employed to obscure ownership and delay detection. Users who have visited truzoom.app or entered credentials on the site should immediately revoke access to any linked wallets and transfer assets to a new, secure wallet. Monitor all connected accounts for unauthorized transactions and enable multi-factor authentication where available. If private keys or recovery phrases were exposed, consider the compromised wallet permanently at risk. No further interaction with the domain should occur, and any local copies of the site or downloaded files should be deleted to prevent persistent threats.