# porewin129.pro — MALICIOUS

> porewin129.pro is a crypto drainer impersonating a trusted brand. Flagged by 11 of 95 VirusTotal vendors. Verify immediately via PhishDestroy.

## Summary
PhishDestroy identifies porewin129.pro as an active crypto wallet drainer posing as a legitimate crypto exchange. This domain is currently classified as elevated risk and remains accessible online, exposing users to imminent financial theft through fraudulent transaction interception.

This domain was flagged by 11 of 95 VirusTotal security vendors, hosts its SSL certificate via Let's Encrypt, and exhibits automated domain generation characteristics. No registrar or IP data is publicly available in standard WHOIS queries, indicating potential privacy protection to evade detection.

Users are strongly advised not to interact with this domain. PhishDestroy recommends immediate blocking via network filters and manual removal from trusted lists. If any interaction has occurred, revoke wallet access, transfer funds to a secure cold wallet, and perform a full system scan using updated antivirus software.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence

## Detection Status
- VirusTotal: 11 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/bed0121f-cad5-4b49-b22d-7f903430558b
- PhishDestroy: https://phishdestroy.io/domain/porewin129.pro/
- LLM endpoint: https://phishdestroy.io/domain/porewin129.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/porewin129.pro/
Last updated: 2026-03-26