genqr[.]trustswallet[.]in

PhishDestroy identifies genqr.trustswallet.in as an active crypto drainer posing as a Trust Wallet QR code generator. This domain is engineered to deceive users into unknowingly transferring cryptocurrency assets to threat actor-controlled wallets, draining victim holdings under the guise of legitimate transactions. This domain was flagged by PhishDestroy after rigorous analysis revealed alarming indicators. VirusTotal currently shows 0 out of 95 detection engines flagging this domain as malicious, highlighting its ability to evade traditional antivirus systems. The domain was registered on March 07, 2025, through Endurance International Group India Private Limited, resolving to IP address 103.49.70.170. Notably, it operates with a valid SSL certificate issued by Let's Encrypt, a tactic commonly used to establish false trust in phishing environments. Users who have visited this domain should immediately cease any cryptocurrency transactions and revoke any wallet approvals linked to this site. Perform a full security audit of connected wallets using trusted tools like PhishDestroy's verification service. Do not interact with wallet addresses, QR codes, or transaction links from untrusted sources. Enable multi-factor authentication on all cryptocurrency accounts and report any suspicious transactions to relevant wallet providers and local cybersecurity authorities.