idconnectservice[.]com

PhishDestroy identifies idconnectservice.com as an active crypto drainer impersonating the legitimate ID Connect Service platform. This domain is currently under investigation by cybersecurity researchers due to its malicious intent to deceive users into connecting cryptocurrency wallets and siphoning funds. The site mimics the branding and functionality of a legitimate identity verification service, potentially targeting users of digital identity platforms or cryptocurrency-related services.

This domain was flagged by 1 of 95 VirusTotal vendors, indicating it has not yet been widely detected by antivirus engines despite its suspicious activity. It resolves to IP address 172.67.158.12 and is registered through Dynadot Inc. The domain was created on January 16, 2026, which is an unusually recent registration date for a service claiming to provide identity verification. Notably, the site utilizes a Google Trust Services SSL certificate, which may lend it an air of legitimacy to unsuspecting users. The absence of detections on VirusTotal suggests this domain may be newly operational or employing evasion techniques to bypass initial security scans.

Given the active status of this crypto drainer and its recent domain registration, PhishDestroy recommends exercising extreme caution. Users should avoid interacting with idconnectservice.com entirely and report this domain to relevant cybersecurity authorities and browser safety programs. Organizations should consider blocking this domain at the network level to prevent accidental exposure by employees or customers. Always verify the authenticity of identity verification services by cross-referencing official channels and never connect cryptocurrency wallets to unfamiliar websites. Monitor financial accounts closely for unauthorized transactions.