indokarirglobal[.]com

PhishDestroy identifies indokarirglobal.com as an active crypto drainer phishing domain under investigation. The domain mimics a generic financial or cryptocurrency service to deceive victims into entering wallet credentials or initiating unauthorized transactions. Current telemetry confirms the domain remains live and accessible as of January 30, 2026.

This domain was flagged by 1 of 95 VirusTotal vendors at the time of analysis and is registered through NameMart Pte. Ltd. It resolves to IP address 148.66.3.116, utilizes a valid Let's Encrypt SSL certificate, and was created on January 30, 2026. Trust scores remain unverified due to low detection rates and recent registration, suggesting a likely opportunistic campaign leveraging fresh infrastructure. The absence of blocklist entries further indicates emerging malicious activity.

While the domain remains online and unflagged by major scanners, users are strongly advised not to interact with it. If exposure has occurred, immediately revoke any associated wallet permissions, scan systems for malware, and submit a report to PhishDestroy for further verification. Organizations should consider blocking the domain and IP at the network perimeter to prevent downstream compromise. Proactive monitoring and user awareness training are recommended to mitigate delivery vectors.