informacaosimples[.]com

PhishDestroy identifies informacaosimples.com as an active crypto drainer domain designed to deceive users into connecting malicious wallet addresses. The domain mimics a legitimate local brand, likely targeting Portuguese-speaking users with promises of simplified information or services. This scheme poses a direct financial risk, as victims may unknowingly authorize cryptocurrency transfers to attacker-controlled wallets upon interaction. The domain’s infrastructure is configured to evade detection, leveraging legitimate-looking SSL certificates to appear trustworthy at first glance. This domain was flagged by VirusTotal with a detection ratio of 1 out of 95 security vendors, indicating limited but critical recognition of its malicious nature. The domain was registered through Fewmoretaps OU (operating as Trustname.com) and resolves to IP address 188.114.97.3. Notably, the domain was created on August 24, 2025, suggesting a recent and potentially opportunistic campaign. The use of Google Trust Services for SSL certificates further complicates detection, as users may assume the domain is legitimate due to the trusted certificate authority. Users who have visited this domain should immediately revoke any connected wallet permissions and avoid interacting with any prompts for cryptocurrency transactions. If funds have been transferred, contact your wallet provider and local authorities to report the incident. For further verification, use PhishDestroy’s real-time threat intelligence to cross-check domain reputations before engaging. Always verify the authenticity of domains, especially those claiming to offer financial services or information portals, to prevent unauthorized access to your assets.