upictures[.]app

PhishDestroy identifies upictures.app as an active cryptocurrency drainer under investigation, currently flagged with a risk level of under_investigation. This domain mimics legitimate image services to deceive users into connecting crypto wallets, enabling unauthorized fund transfers. The threat is classified as a generic phishing attack with direct financial implications for cryptocurrency holders.

This domain was flagged by PhishDestroy on seed 3562a4, with technical indicators including a VirusTotal detection rate of 0/95 engines, registration through Fewmoretaps OU (operating as Trustname.com), a March 01, 2026 creation date, and resolution to IP 216.24.57.1. Despite the absence of current blocklist entries or trust score penalties, the domain's recent registration and lack of online reputation pose significant risks. The absence of detections on VirusTotal suggests either a newly deployed attack or evasion tactics by the threat actor.

To mitigate exposure to upictures.app, users should immediately avoid interacting with the domain, including refraining from wallet connections or file uploads. Cryptocurrency holders are advised to verify URLs via PhishDestroy’s real-time scanner before any transactional activity. Block the IP 216.24.57.1 at the network level and report any suspicious connections to PhishDestroy for further analysis. Always cross-check domain registrations against ICANN records and monitor wallet activity for unauthorized transactions.