usukpvashop[.]com

PhishDestroy identifies the domain usukpvashop.com as an active crypto drainer scam under investigation. The site mimics legitimate UK-based e-commerce platforms to harvest cryptocurrency wallet credentials and drain victim funds. Current status remains active, with threat actors leveraging deceptive domain registration tactics to evade detection.

This domain was flagged by 0 of 95 VirusTotal vendors as of its recent analysis, indicating a low initial detection rate despite its malicious intent. Registered through WEBCC on June 05, 2025, the domain resolves to IP 188.114.96.3 and utilizes a Google Trust Services SSL certificate to appear legitimate. With no existing blocklist entries and pristine trust scores, the domain exemplifies a stealthy, short-lived campaign designed for rapid exploitation before takedown measures can be deployed.

Given the domain’s active status and the absence of vendor detections, immediate action is required to mitigate potential financial losses. Organizations and end-users should block usukpvashop.com at the network and DNS levels, and inspect endpoints for interactions with the associated IP or SSL certificate. Security teams are advised to monitor for similar domains registered around the same timeframe, as threat actors frequently pivot to new infrastructure to sustain operations. Enhanced phishing awareness training focusing on crypto drainer tactics is strongly recommended to prevent user compromise.