tonfarming-dex[.]xyz

PhishDestroy has identified tonfarming-dex.xyz as a generic phishing threat, specifically a fraudulent sign-up page impersonating a decentralized exchange platform. This domain was designed to trick users into entering credentials or private keys, likely draining cryptocurrency wallets. The page title 'Ton Farming-Dex | Sign Up' suggests it mimics a legitimate farming or DeFi service to steal sensitive information.

Technical indicators confirm the risk: VirusTotal shows 2 out of 95 security vendors flagging the domain, and it appears on 1 security blocklist. The domain resolves to IP address 162.0.209.203, was registered through Spaceship, Inc., and created on February 21, 2026. Its SSL certificate is issued by Sectigo Limited (RSA Domain Validation Secure Server CA), which is a common certificate authority but does not validate the site's legitimacy. Google Safe Browsing status is not provided, but the blocklist presence and vendor flags raise serious concerns.

Currently, tonfarming-dex.xyz is offline, which limits immediate harm but does not eliminate risk—phishing domains often reappear under new names. Users who may have visited or entered data should consider their accounts compromised and take protective measures. PhishDestroy recommends avoiding any interaction with this domain and verifying all crypto platforms through official channels before connecting wallets or sharing personal information.