adobeevoiv[.]duckdns[.]org

PhishDestroy identifies adobeevoiv.duckdns.org as an active crypto drainer posing as SharePoint Online. The domain’s risk level is elevated due to its confirmed malicious intent of stealing cryptocurrency through fraudulent login pages and session hijacking. Users interacting with this domain risk irreversible financial losses, as the infrastructure is designed to drain wallets upon authentication. This domain was flagged by 10 out of 95 VirusTotal security vendors, indicating significant but not universal detection. The domain resolves to IP 169.255.57.128 and uses a Let’s Encrypt SSL certificate to appear legitimate. The DuckDNS subdomain (duckdns.org) is a dynamic DNS service often exploited by threat actors to host phishing pages with minimal friction. No historical blocklist data or creation date is publicly available, suggesting recent deployment. The page title, 'Share Point Online,' is a deliberate impersonation of Microsoft’s SharePoint platform, aiming to deceive users into entering credentials or connecting crypto wallets. To mitigate risk, avoid interacting with adobeevoiv.duckdns.org entirely. Verify any suspicious SharePoint links by navigating directly to the official Microsoft portal. If you suspect exposure, revoke wallet connections immediately and scan for unauthorized transactions. Report this domain to PhishDestroy for further analysis and community protection.