app[.]thnuster[.]cc

PhishDestroy identifies app.thnuster.cc as an active crypto drainer posing serious risks to cryptocurrency users. This malicious domain mimics legitimate service interfaces to trick victims into connecting crypto wallets, whereupon funds are drained to attacker-controlled addresses. The attackers rely on social engineering tactics, often distributing links through fake airdrop announcements or fraudulent support channels. Once a victim visits app.thnuster.cc and grants wallet permissions, the site silently executes unauthorized transactions that rapidly empty token balances before the victim realizes what has happened. This domain was flagged as suspicious by 2 out of 95 VirusTotal security vendors, indicating limited but confirmed malicious activity. The SSL certificate is issued by Google Trust Services, which suggests the attackers leveraged a trusted certificate authority to enhance credibility. The domain is currently active and presents an elevated risk to users who interact with it. Technical analysis shows the page title displayed is identical to the domain name, a common tactic to maintain deception and avoid detection by users who only glance at browser tabs. If you visited app.thnuster.cc, disconnect your wallet immediately and revoke any permissions granted through your wallet’s connected apps settings. Do not enter seed phrases, private keys, or sign any transactions on this site. Report the domain to your wallet provider and consider transferring remaining funds to a clean wallet. Monitor your transaction history for unauthorized activity and report suspicious transfers to your local cybercrime unit.