# loveshop5.com — SUSPICIOUS

> PhishDestroy identifies loveshop5.com as an active crypto drainer. VirusTotal shows 0/95 detections. Verify URLs before clicking to avoid theft.

## Summary
PhishDestroy identifies loveshop5.com as an active crypto drainer impersonating a generic online shop. The domain is currently under investigation but remains operational, posing a direct risk to cryptocurrency users who may interact with malicious payment forms embedded in the site. The threat involves unauthorized fund extraction via deceptive checkout processes, leveraging social engineering to trick victims into connecting wallets or entering private keys. Users should treat this domain as hostile until proven otherwise.  

This domain was flagged through PhishDestroy’s automated pipeline, revealing key indicators of compromise. The domain resolves to IP 91.206.71.218 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on November 10, 2023. Despite hosting an SSL certificate issued by Google Trust Services, VirusTotal currently shows 0 detections across 95 scanning engines, indicating it evades traditional antivirus detection. The domain has not been listed on major blocklists at this time, and trust scores remain unverified due to its recent creation and low reputation. The absence of detections suggests the threat is either newly deployed or employs sophisticated evasion tactics.  

To mitigate exposure to this crypto drainer, users must avoid clicking links from unsolicited emails, social media ads, or unverified sources promoting loveshop5.com. Before interacting with any online shop, verify the domain’s reputation using PhishDestroy or similar threat intelligence platforms. Never connect cryptocurrency wallets or enter private keys on unfamiliar websites. If funds are stolen, report the incident to local authorities and file a complaint with relevant blockchain analysis firms. Network defenders should block the IP 91.206.71.218 and monitor for additional domains registered under NICENIC INTERNATIONAL GROUP CO., LIMITED with similar naming patterns.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2023-11-10 09:42:16
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 91.206.71.218

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b2ae821f-cbd0-47c1-b274-86cf6b849a40
- PhishDestroy: https://phishdestroy.io/domain/loveshop5.com/
- LLM endpoint: https://phishdestroy.io/domain/loveshop5.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/loveshop5.com/
Last updated: 2026-03-27