dep65t[.]com

PhishDestroy identifies dep65t.com as an active crypto-draining phishing domain with an elevated risk level. The domain is engineered to lure users into transferring digital assets to attacker-controlled wallets under the guise of legitimate services.

This domain was flagged by 1 out of 95 VirusTotal security vendors, indicating early-stage but confirmed malicious activity. It was registered on March 26, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for accommodating high-risk registrations. The domain resolves to IP 188.114.96.3, which hosts multiple high-risk entities. No evidence of inclusion on major blocklists (e.g., Google Safe Browsing, OpenPhish, PhishTank) was detected at time of analysis, reflecting a recently activated threat. SSL trust scores are neutral, utilizing a legitimate but freely issued Let’s Encrypt certificate, which attackers often exploit to appear legitimate.

Users must refrain from interacting with any login or wallet-connect prompts on this domain. Verify all URLs through PhishDestroy’s real-time scanner before entering credentials or signing transactions. Cryptocurrency users are advised to double-check destination addresses and use hardware wallets when possible. Report this domain immediately via PhishDestroy’s takedown portal to prevent further abuse. Organizations using threat intelligence feeds should include dep65t.com with a medium-high severity tag for proactive blocking.