wallet[.]crypterium24[.]com

This domain, wallet.crypterium24.com, is identified as a crypto drainer phishing site targeting cryptocurrency users under the guise of Crypterium24, a purported crypto trading platform. Analysis indicates the site was designed to execute unauthorized transactions by tricking victims into connecting their wallets, likely through a malicious smart contract or JavaScript-based drainer kit. The page title, "Crypterium24 | Crypto & Trade," reinforces the impersonation, while detected technologies such as jQuery and Bootstrap suggest the use of common web frameworks to facilitate the attack. Infrastructure analysis reveals the domain was registered on September 13, 2024, through Realtime Register B.V. and resolves to the IP address 158.220.96.229. It is flagged by 4 out of 95 security vendors on VirusTotal, with detections likely tied to its malicious JavaScript payloads or wallet-draining functionality. The domain appears on two security blocklists, including PhishDestroy and OISD, but was not listed in Google Safe Browsing at the time of assessment. The SSL certificate, issued by Let's Encrypt, is standard for phishing sites to mimic legitimacy, while backend technologies like PHP, Apache HTTP Server, and AlmaLinux indicate a typical hosting environment for such threats. The domain is currently offline, reducing immediate risk to users; however, residual threats persist. Historical DNS records or cached versions of the site may still pose a risk if accessed via search engines or archived pages. Organizations and individuals are advised to block the domain and associated IP at the network level, monitor for wallet-draining activity linked to this infrastructure, and verify any cryptocurrency transactions originating from interactions with Crypterium24-branded sites. Users who connected wallets to this domain should revoke permissions and transfer assets to a new wallet as a precautionary measure.