cryptocurrencyinvestigationsbok[.]com

This domain, cryptocurrencyinvestigationsbok.com, is flagged as an active crypto drainer phishing infrastructure. Analysis indicates no direct brand impersonation, but the site likely deploys wallet-draining scripts targeting cryptocurrency users. The domain does not appear to mimic a specific legitimate service, suggesting a generic but high-risk phishing operation designed to siphon digital assets from victims. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 44.227.65.245 and was registered through Porkbun LLC on March 06, 2026. VirusTotal detection shows 3 out of 95 security vendors flagging the domain as malicious. The domain appears on three security blocklists and is actively blocked by browser extensions and security tools. The page title, 'porkbun.com | expired domain,' suggests an attempt to mislead users or evade detection by masquerading as an expired domain listing. The domain remains active, with no evidence of takedown or sinkholing at this time. Response actions by security providers include blocking access via browser-based protections, though the infrastructure persists. The elevated risk level is justified by the domain's association with crypto-draining activity, its presence on multiple blocklists, and its registration through a privacy-enabling registrar. Users are advised to avoid interaction with the domain, verify wallet security, and monitor for unauthorized transactions. Further monitoring is recommended to track potential shifts in hosting or additional malicious payloads.