# find-alert-device.info — MALICIOUS

> Domain find-alert-device.info is a crypto drainer posing as a fake login portal. Flagged by 12/95 VirusTotal vendors.

## Summary
PhishDestroy identifies find-alert-device.info as an active crypto drainer phishing domain designed to steal cryptocurrency assets. This domain mimics legitimate alert systems to trick users into entering wallet credentials or connecting malicious crypto wallets, resulting in fund theft. The infrastructure is deliberately engineered to exploit trust in security-related domains, leveraging urgency to bypass user skepticism. Technical analysis confirms this is not a generic phishing attempt but a targeted campaign aimed at cryptocurrency holders under the guise of device monitoring or security alerts.

This domain was flagged by 12 out of 95 security vendors on VirusTotal, indicating widespread detection as malicious. It was registered through Sav.com, LLC on February 17, 2026, and resolves to IP address 50.6.199.153. The SSL certificate issued by Let’s Encrypt does not confer legitimacy, as threat actors frequently exploit free certificate authorities to enhance believability. The recent domain creation date suggests an opportunistic campaign, possibly timed to coincide with increased user activity in crypto markets or platform updates. The combination of low detection initially and rapid deployment hints at an evasive operation designed to fly under the radar before widespread awareness emerges.

Users who have visited find-alert-device.info should immediately cease all crypto-related activities from connected wallets or browsers. Disconnect wallets and revoke any previously granted permissions through the wallet interface or blockchain explorer. Scan devices for malware using reputable antivirus tools, as crypto drainers often deploy keyloggers or browser extensions. Report the domain to PhishDestroy and your wallet provider. Enable multi-factor authentication on all crypto accounts and avoid interacting with unsolicited security alerts. Stay vigilant: crypto drainers evolve rapidly, and even a single click can result in irreversible asset loss.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-02-17 06:11:57
- Registrar: Sav.com, LLC
- IP: 50.6.199.153

## Detection Status
- VirusTotal: 12 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/15c78524-4116-4c67-96e1-448c940a4dc0
- PhishDestroy: https://phishdestroy.io/domain/find-alert-device.info/
- LLM endpoint: https://phishdestroy.io/domain/find-alert-device.info/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/find-alert-device.info/
Last updated: 2026-03-23