bt-internet-106112[.]weeblysite[.]com

PhishDestroy identifies bt-internet-106112.weeblysite.com as a high-risk crypto drainer domain currently active and distributing malicious content. The domain is actively resolving to a suspicious IP address and leverages social engineering tactics to deceive users into connecting crypto wallets or submitting sensitive credentials. This domain poses an immediate threat to cryptocurrency holders and must be treated with high caution.

This domain was flagged by 9 out of 95 VirusTotal security vendors, indicating significant malicious activity. It resolves to IP address 74.115.51.55 and was created on December 19, 2012. Registered through MarkMonitor Inc., it currently holds a Google Trust Services SSL certificate, despite its compromised reputation. The domain’s longevity and use of a trusted certificate issuer suggest an attempt to bypass basic security checks, increasing the risk of successful exploitation. The high flag count and active status confirm its role in crypto drainer campaigns.

As this domain remains active, users should avoid any interaction and immediately block access at the network level. PhishDestroy recommends conducting a full system scan with updated antivirus tools and inspecting recent crypto transactions for unauthorized transfers. Network administrators should block the associated IP 74.115.51.55 and domain entry in firewalls and DNS filters. Verify all crypto-related websites through official channels before engaging, and report any suspicious activity to PhishDestroy for further investigation.