mist-wallet[.]com

PhishDestroy identifies mist-wallet.com as an active crypto-draining domain masquerading as the legitimate Mist Wallet interface. This fraudulent website is engineered to trick cryptocurrency users into connecting their wallets and signing malicious transactions that transfer assets to attacker-controlled addresses without consent. Security telemetry shows the site remains undetected by antivirus engines, with 0 detections out of 95 scans on VirusTotal at the time of analysis. The domain was registered on April 17, 2025, through WebNic.cc, a registrar known for anonymized bulk registrations favored by threat actors, and is currently resolving to IP 188.114.97.3 under a valid Let's Encrypt SSL certificate to enhance credibility. This domain represents a high-risk crypto drainer threat that exploits user trust through impersonation and social engineering. With no current blocklist coverage despite clear malicious intent, it poses an elevated risk to visitors who may be searching for wallet-related services. The use of a recently registered domain, anonymized registrar, and free SSL certificate further indicates deliberate attempts to evade detection while maintaining a veneer of legitimacy. The absence of detection on VirusTotal suggests a need for proactive threat intelligence monitoring rather than reactive scanning. Users who have visited mist-wallet.com or interacted with its interface are strongly advised to immediately disconnect any connected wallets, revoke any signed permissions or approvals using tools like Revoke.cash or Etherscan, and scan their devices for malware. Cryptocurrency users should only access official wallet platforms through verified bookmarks or official domains, and consider using hardware wallets or wallet guards to prevent unauthorized transaction signing. Report any suspicious transactions or connected wallet interactions to your wallet provider and relevant blockchain explorers. If funds have been stolen, file a complaint with local cybercrime units and blockchain analysis platforms for recovery support.