checktrc[.]info

PhishDestroy identifies checktrc.info as a recently activated crypto drainer domain that is currently under investigation by the anti-phishing team. The domain was created on June 17, 2025, and is resolving to IP address 69.10.62.204. No specific brand name was found in connection with this site during the initial assessment, suggesting a targeted generic campaign designed to steal cryptocurrency via malicious transaction approvals. The domain’s fast registration timeline and lack of historical reputation are consistent with attacker behavior patterns used to deploy drainer kits before security layers can respond.

Technical indicators reveal that the domain has not yet been flagged by VirusTotal, showing 0 detections out of 95 scanners as of the latest check. The domain was registered through GoDaddy.com, LLC and secured with a Let's Encrypt SSL certificate, adding a false veneer of legitimacy. The creation date—June 17, 2025—places this domain among newly emergent threats, reducing the chance of prior blocklisting. As of now, this site remains unlisted on major blocklists such as Google Safe Browsing (GSB), further delaying detection. These factors indicate a low-profile, high-risk deployment aimed at bypassing early-stage filtering mechanisms.

The current status of checktrc.info is active and under active review by PhishDestroy’s analysts. No definitive drainer kit payload has been confirmed, but the domain’s configuration and behavior strongly suggest deployment of a crypto drainer. Users are advised to avoid this domain entirely and to verify any crypto-related website using PhishDestroy’s real-time threat lookup tool. The remaining risk is classified as 'under investigation,' meaning the threat may escalate as additional intelligence is gathered. Immediate action is recommended for any users who may have interacted with this domain, including revoking unauthorized transaction approvals and scanning connected wallets for signs of compromise.