trustspins[.]cc

PhishDestroy identifies trustspins.cc as an active crypto drainer designed to trick users into connecting wallets or entering seed phrases. This domain lures victims with promises of free spins or bonuses, then drains cryptocurrency balances once wallet permissions are granted. The site was created on November 26, 2025, less than a month ago, and already shows elevated risk with 13 out of 95 VirusTotal security vendors flagging it for malicious activity. Additionally, VirusTotal lists the domain on 2 blocklists, and the SSL certificate issued by Google Trust Services adds superficial legitimacy while masking its malicious intent. This domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 172.67.145.64, a hosting infrastructure previously associated with fraudulent campaigns. The short domain age combined with low detection rates suggests this is a newly deployed threat actively targeting crypto enthusiasts. Users should avoid interacting with the site entirely, as even visiting the page may trigger malicious scripts attempting to compromise browser sessions or wallet extensions. If you have already visited trustspins.cc, immediately revoke any wallet permissions granted to the site using your wallet’s connection manager (e.g., MetaMask or Phantom). Clear browser cache and cookies associated with the domain, then run a full antivirus scan. Consider changing passwords for crypto-related accounts and monitor wallet transactions for unauthorized transfers. For further verification, input the domain into PhishDestroy’s scanner to confirm safety or receive remediation guidance.