kedovex[.]com

PhishDestroy identifies kedovex.com as a recently activated crypto drainer domain currently under investigation for malicious intent. Registered on April 02, 2026, through Fewmoretaps OU (d/b/a Trustname.com), this domain resolves to IP address 188.114.97.3 and utilizes a Let's Encrypt SSL certificate to appear legitimate. Despite zero detections on VirusTotal (1/95 scans), the domain’s recent creation date and choice of obscure registrar raise immediate suspicion regarding its potential for fraudulent activity. This domain poses a significant risk as a crypto drainer, designed to impersonate a well-known brand and deceive users into connecting cryptocurrency wallets or transferring funds under false pretenses. The combination of a newly registered domain, a hosting IP with a history of malicious activity, and an SSL certificate creates a deceptive facade of credibility. The absence of VirusTotal detections does not guarantee safety, as threat actors frequently exploit newly registered domains before they are widely recognized and flagged by security vendors. Users who have visited kedovex.com should immediately disconnect any connected cryptocurrency wallets, revoke any permissions granted to the domain, and scan their devices for malware. Avoid interacting with unsolicited links or emails related to this domain. Report any suspicious transactions or wallet connections to your security team or relevant cryptocurrency platform. Block the domain and its IP address at your network perimeter to prevent further access.