tron[.]pordoin[.]com

PhishDestroy has identified tron.pordoin.com as a high-risk phishing domain targeting cryptocurrency users. The domain, which impersonates the legitimate platform 欧意国际, was flagged with an elevated risk level due to its use of a generic phishing scheme designed to drain digital assets from unsuspecting victims. The site has since been taken offline, but the infrastructure behind it remains a concern for potential future attacks.

Technical analysis reveals that tron.pordoin.com was registered on February 21, 2026, through GoDaddy.com, LLC, and resolves to IP address 154.36.152.74. VirusTotal reports that 1 out of 95 security vendors flagged the domain as malicious, and it appears on one security blocklist. The site used an SSL certificate issued by Let's Encrypt (R12), which is common among phishing operations due to its free and automated issuance. These indicators collectively point to a well-orchestrated phishing campaign with a short lifespan, likely designed to evade detection.

Users who may have encountered this domain or entered credentials on it should immediately change their passwords for any related accounts and enable two-factor authentication. If cryptocurrency wallets were connected, transfer remaining funds to a secure wallet and revoke any permissions granted to the site. Always verify the legitimacy of platforms like 欧意国际 by visiting official sources directly, and report any suspicious domains to PhishDestroy for further analysis.