trx9528[.]top

PhishDestroy identifies trx9528.top as an active credential harvesting phishing domain. This domain is currently classified under generic_phishing and remains unblocked with a status marked as active.

This domain was flagged by 3 of 95 VirusTotal vendors, registered through NameMart Pte. Ltd., and resolved to IP 108.165.20.66. The domain was created on April 24, 2026, and secured with a Let’s Encrypt SSL certificate. No blocklist detections have been recorded at this time.

Current status indicates an elevated but unassessed risk; however, the lack of VirusTotal detections and recent creation date suggest a potentially emerging threat. Users should avoid interacting with trx9528.top and report any suspicious activity involving this domain. Security teams are advised to monitor DNS resolutions, scan for connections to the associated IP, and update blocklists accordingly. Exercise heightened caution with newly registered domains exhibiting low trust scores and no prior reputation.