informacaovalidada[.]com

PhishDestroy identifies a crypto drainer scam impersonating legitimate information services on the domain informacaovalidada.com. This site poses an elevated risk due to its active role in diverting cryptocurrency transactions to attacker-controlled wallets. Users who interact with this domain may unknowingly authorize unauthorized crypto transfers, resulting in irreversible financial losses. This domain exhibits multiple red flags consistent with malicious activity. VirusTotal analysis confirms detection by just 1 out of 95 security vendors, indicating low detection coverage despite clear malicious intent. It was registered through Fewmoretaps OU d/b/a Trustname.com, a registrar with questionable oversight of fraudulent domains. The domain itself was created alarmingly recently—on August 24, 2025—suggesting a hastily deployed threat designed to exploit current events or trending topics. The site resolves to IP 104.21.54.142, which has been linked in security reports to multiple crypto-draining campaigns. Notably, the SSL certificate is issued by Google Trust Services, a tactic often used to lend false legitimacy to fraudulent sites. If you or someone you know has visited informacaovalidada.com, take immediate action. Disconnect any connected cryptocurrency wallets and revoke any permissions granted to the site. Scan your devices for malware and review transaction histories for unauthorized activity. Report this domain to PhishDestroy and your local cybercrime unit using the seed identifier 8a25e0. Avoid re-engaging with the site and warn others to prevent further victimization. Stay vigilant—new domains like this emerge daily, often with sophisticated tactics to appear authentic.