thorchain[.]pro

PhishDestroy has identified thorchain.pro as a high-risk brand impersonation threat targeting Thorchain users. This domain is specifically designed as a crypto drainer, attempting to trick victims into connecting their wallets and ultimately stealing their funds. The page title was observed as "Redirecting...", suggesting an attempt to evade initial detection.

Technical analysis reveals that thorchain.pro scores 11 out of 95 on VirusTotal, indicating significant detection by security vendors. The domain was registered through NameSilo, LLC on February 21, 2026, and currently appears on 4 security blocklists. Google Safe Browsing status was not provided, but the domain's presence on multiple blocklists confirms its malicious nature. The domain is currently offline, meaning the hosting has been taken down as part of an active response.

PhishDestroy recommends that users remain vigilant and always verify the legitimacy of any site before connecting their wallets or entering credentials. To stay safe, always double-check URLs and use trusted sources like PhishDestroy for the latest threat intelligence. If you encounter similar domains, report them immediately to help protect the community.