security-bot[.]club

PhishDestroy identifies security-bot.club as an active crypto drainer posing as security assistance. This domain resolves to IP 188.114.97.3 and operates under a Let's Encrypt SSL certificate. Registered through PDR Ltd. d/b/a PublicDomainRegistry.com, the domain was created suspiciously on May 01, 2026, a date that suggests preemptive registration for malicious use. VirusTotal analysis confirms detection by 4 out of 95 security vendors, while this domain appears on 1 active blocklist and is blocked by OISD, indicating widespread recognition of its malicious intent. Technical indicators further validate the elevated risk profile. The domain’s recent creation date, coupled with its active status and low detection threshold, suggests a rapidly deployed threat designed to exploit user trust in security-related domains. The use of a legitimate SSL certificate (Let’s Encrypt) adds a veneer of authenticity, potentially deceiving users into believing the site is safe. Combined with its presence on a single blocklist and exclusion by OISD, this domain exhibits traits typical of opportunistic phishing campaigns targeting cryptocurrency users under the guise of security tools. Users who have visited security-bot.club should immediately cease any interaction with the site and revoke any cryptocurrency wallet permissions granted to the domain. If transactions were attempted or completed, monitor wallets for unauthorized transfers and report suspicious activity to relevant authorities. Avoid downloading any files or entering credentials on this domain. For comprehensive safety verification, use PhishDestroy’s tools to cross-reference this domain’s threat status and receive real-time alerts for similar risks.