# my.mcquar-ltd.com — SUSPICIOUS

> PhishDestroy identifies my.mcquar-ltd.com as a crypto drainer impersonating McQuar Ltd. VT 0/95, registered March 10, 2026. Verify before clicking.

## Summary
PhishDestroy has flagged the domain my.mcquar-ltd.com as a generic phishing site with a suspected crypto-draining kit targeting unsuspecting users. The site masquerades as McQuar Ltd, a UK-based entity, to lure victims into connecting crypto wallets or entering credentials under false pretenses. No specific drainer kit hash is publicly available yet, but behavioral analysis suggests a JavaScript-based wallet-draining mechanism is likely deployed.  This domain was flagged under investigation on March 10, 2026, the same day it was registered through NameSilo, LLC. It resolves to IP 146.103.113.17 and holds a valid Let's Encrypt SSL certificate, which may be used to enhance credibility. VirusTotal currently reports 0 detections out of 95 engines, and Google Safe Browsing (GSB) has not yet flagged the domain. The IP address has no prior associations with known blocklists, indicating this may be a newly activated campaign.  As of the latest scan, my.mcquar-ltd.com remains active and unblocked on major browsers and security platforms. PhishDestroy continues to monitor and analyze the site for updates to the drainer payload or infrastructure. Users are strongly advised to avoid interacting with the domain and verify any McQuar Ltd communications through official channels. The remaining risk is high due to the domain’s recent activation and the absence of widespread detection.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-10 12:24:02
- Registrar: NameSilo, LLC
- IP: 146.103.113.17

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ffa7c430-63c2-4fd9-a8ea-bce66f9dd643
- PhishDestroy: https://phishdestroy.io/domain/my.mcquar-ltd.com/
- LLM endpoint: https://phishdestroy.io/domain/my.mcquar-ltd.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/my.mcquar-ltd.com/
Last updated: 2026-03-21