magstorys[.]com

PhishDestroy has identified the domain magstorys.com as a platform actively hosting a crypto drainer, a malicious tool designed to siphon cryptocurrency from unsuspecting users. This threat masquerades as a legitimate news portal, leveraging a deceptive page title to appear credible. Upon further analysis, the domain resolves to the IP address 2.57.91.31 and is secured with a Let's Encrypt SSL certificate, which may give users a false sense of security. The domain was registered through HOSTINGER operations, UAB, on July 24, 2023, indicating a relatively recent but established presence. The evidence supporting this advisory includes zero detections on VirusTotal out of 95 security vendor scans, highlighting the stealthy nature of this campaign. Additionally, the domain remains unlisted on major blocklists, further emphasizing the need for proactive detection measures. The combination of low detection rates, recent registration, and the absence of a strong reputation record underscores the urgency for users to exercise caution. If you have visited magstorys.com, PhishDestroy strongly advises discontinuing any cryptocurrency transactions linked to this site. Users are also urged to scan their devices for malware and review their wallet addresses for unauthorized transactions. Enable multi-factor authentication on all crypto accounts and report any suspicious activity to PhishDestroy immediately. Always verify unfamiliar domains using PhishDestroy’s tools before engaging with them to prevent potential financial loss.