trx[.]store

PhishDestroy identifies trx.store as an active crypto drainer mimicking the TRON blockchain ecosystem. This domain operates under a generic phishing threat type focused on cryptocurrency asset theft through unauthorized wallet connections and credential harvesting. The site currently remains active as of the latest assessment cycle.

trx.store resolves to IP address 188.114.97.3 and is flagged by 4 of 95 VirusTotal security vendors, indicating a low immediate detection rate despite clear malicious intent. The domain uses a Google Trust Services SSL certificate for authenticity signaling, hosted on infrastructure associated with known high-risk activity. While the precise creation date and registrar remain unverified in open sources, the domain’s operational status and infrastructure choices reflect deliberate evasion tactics targeting cryptocurrency users. Trust indicators are artificially inflated to deceive visitors into believing the site is legitimate.

Given the confirmed intent to deceive users into connecting cryptocurrency wallets or entering private keys under the guise of TRON-based services, this domain represents an immediate financial threat. Users are strongly advised to avoid accessing trx.store entirely. If accidentally visited, disconnect any connected wallets immediately, clear browser cache and cookies, and scan devices using updated antivirus software. Report the domain to your wallet provider and relevant cybersecurity authorities to aid in blocking and takedown efforts.