# webmarketpills.com — MALICIOUS

> PhishDestroy flags webmarketpills.com as a crypto-drainer phishing site flagged by 5 of 95 VirusTotal vendors targeting cryptocurrency users.

## Summary
PhishDestroy identifies webmarketpills.com as an active crypto-drainer phishing site currently leveraging brand impersonation to deceive cryptocurrency users.

This domain was flagged by 5 of 95 VirusTotal security vendors, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 07, 2025, and resolves to IP 141.98.11.218. No additional blocklist counts or trust scores were provided in the seed intelligence.

Due to the elevated risk and confirmed crypto-drainer functionality, PhishDestroy classifies this domain as an active threat. Users and organizations are strongly advised to block all traffic to this domain at the network perimeter and update DNS blocklists immediately. Security teams should inspect any recent connections to 141.98.11.218 and audit wallet connection logs for suspicious activity. Exercise caution when receiving links or QR codes referencing webmarketpills.com or similar-looking domains.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-04-07 11:10:25
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 141.98.11.218

## Detection Status
- VirusTotal: 5 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/cb104260-bcdb-4a6d-917c-3c36a634dca1
- PhishDestroy: https://phishdestroy.io/domain/webmarketpills.com/
- LLM endpoint: https://phishdestroy.io/domain/webmarketpills.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/webmarketpills.com/
Last updated: 2026-03-27