# treasurefun.online — SUSPICIOUS

> PhishDestroy flags treasurefun.online as a NEW crypto drainer domain registered April 28, 2025 via Namecheap; detect 0/95 on VirusTotal!

## Summary
PhishDestroy identifies treasurefun.online as an active crypto drainer domain pending threat confirmation. The site resolves to IP 104.21.36.49 and was registered April 28, 2025 through NAMECHEAP INC, carrying a Google Trust Services SSL certificate. VirusTotal currently shows 0/95 detections, and the domain is not yet listed on major blocklists such as PhishTank or OpenPhish. While indicators remain preliminary, the combination of fresh domain age, reputable SSL issuer, and absence from detection engines suggests it may currently evade automated scanning.  The threat remains under investigation pending behavioral telemetry and user reports. Key data points include registration via NAMECHEAP INC, creation date April 28, 2025, resolution to IP 104.21.36.49, and a Google Trust Services SSL certificate. VirusTotal returned 0/95 detections as of the latest scan, indicating low current detection coverage. No confirmed reports of credential harvesting or brand impersonation have been recorded to date, but the domain’s functionality and metadata warrant caution.  To mitigate risks from this potential crypto drainer, users should avoid engaging with the site entirely. Never connect wallets or enter seed phrases on untrusted domains, even if they appear legitimate via HTTPS. Verify any crypto-related site through third-party trust lists such as CoinGecko or official brand channels. Use hardware wallets and ensure your browser extensions are updated to detect suspicious scripts. If you suspect interaction, revoke unauthorized wallet connections immediately and report the domain to PhishDestroy for further analysis.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-04-28 06:01:47
- Registrar: NAMECHEAP INC
- IP: 104.21.36.49

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9fc87457-4f09-4972-92cb-709683ebff40
- PhishDestroy: https://phishdestroy.io/domain/treasurefun.online/
- LLM endpoint: https://phishdestroy.io/domain/treasurefun.online/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/treasurefun.online/
Last updated: 2026-04-12