# www.yourdomainnews.com — SUSPICIOUS > yourdomainnews.com harbors a crypto drainer phishing scam; 1/95 VirusTotal engines flag this domain—verify safety on PhishDestroy before you click. ## Summary PhishDestroy identifies www.yourdomainnews.com as a live crypto-draining phishing portal that silently swaps genuine crypto addresses on the clipboard and siphons funds to attacker-controlled wallets. The site mimics a rogue news aggregator to lure users into connecting their Web3 wallets, at which point a malicious smart-contract or browser-extension drainer auto-transfers tokens whenever a transaction is signed. Unsuspecting victims typically see balances drop to zero within minutes, with no practical means of recovery. This domain was flagged by exactly 1 out of 95 VirusTotal security engines on July 26, 2025— mere hours after its registration. Behind the scenes it resolves to IPv4 address 185.151.30.189, operated via Unstoppable Domains, and currently carries a valid Let's Encrypt SSL certificate to appear trustworthy. The extremely low blocklist coverage (1/95) combined with a freshly minted domain age of less than one day places the threat level at elevated, indicating active exploitation campaigns rather than historical abuse. If you visited www.yourdomainnews.com, disconnect your wallet immediately, revoke any recently signed permissions on etherscan.io or polygonscan.com, and run a malware scan on your browser and operating system. Use PhishDestroy’s real-time lookup to confirm whether the domain is blocked in its threat intelligence feed before engaging further. Exercise heightened caution with any site prompting crypto transactions, and always verify destination addresses manually. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registered: 2025-07-26 10:41:21 - Registrar: Unstoppable Domains - IP: 185.151.30.189 ## Detection Status - VirusTotal: 1 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/1073dce0-38f5-4e3c-b23e-e8f2a823adc7 - PhishDestroy: https://phishdestroy.io/domain/www.yourdomainnews.com/ - LLM endpoint: https://phishdestroy.io/domain/www.yourdomainnews.com/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/www.yourdomainnews.com/ Last updated: 2026-03-22