plus800[.]pro

This domain, plus800.pro, is flagged as a brand impersonation threat specifically targeting Trust Wallet, a widely used cryptocurrency wallet service. Analysis indicates the site masquerades as a legitimate blockchain investment platform, using the page title 'Blockchain Investment Project Website - Unlock Financial Freedom' to lure victims into disclosing sensitive credentials or transferring funds. No explicit drainer kit signatures have been identified, but the infrastructure aligns with known phishing campaigns designed to exploit trust in cryptocurrency services. Infrastructure analysis reveals the following technical indicators: the domain is registered through Domain International Services Limited and resolves to the IP address 104.21.68.85, a Cloudflare-protected endpoint. The SSL certificate is issued by Google Trust Services, a common tactic to appear legitimate. VirusTotal detection shows 3 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and is currently classified as offline. Technologies detected include Cloudflare Browser Insights and HTTP/3, suggesting the use of modern web infrastructure to evade detection. Current status indicates the domain has been taken offline, likely in response to security interventions such as the block imposed by PhishDestroy. However, the elevated risk level persists due to the domain's recent activity and the potential for re-emergence under a similar or altered infrastructure. Users are advised to verify wallet addresses independently, avoid interacting with unsolicited investment offers, and monitor for unauthorized transactions. Organizations should update blocklists to include this domain and its associated IP, while remaining vigilant for related phishing attempts leveraging similar impersonation tactics.