comparemarketcap[.]com

PhishDestroy identifies comparemarketcap.com as a fraudulent website posing as the legitimate CoinMarketCap platform to deploy crypto drainer malware. The domain mimics the branding and functionality of CoinMarketCap to trick users into connecting cryptocurrency wallets, after which funds are automatically drained to attacker-controlled addresses. This is a high-risk threat often associated with immediate financial loss upon interaction, making it critical for users to recognize and avoid this domain entirely. This domain was flagged for exhibiting multiple red flags consistent with malicious crypto drainer operations. PhishDestroy's analysis reveals that comparemarketcap.com was registered through Porkbun LLC on January 15, 2022, a relatively recent creation date for a site claiming to be a major cryptocurrency data provider. The domain resolves to IP address 216.150.1.65 and utilizes a Let's Encrypt SSL certificate to appear legitimate. Notably, at the time of this assessment, VirusTotal reports 1 out of 95 security engines detected malicious activity, underscoring how new or evasive these threats can be. The absence of detections does not indicate safety; rather, it highlights the stealthy nature of these attack vectors. If you have visited comparemarketcap.com or interacted with it in any way, PhishDestroy urges you to take immediate action: disconnect your cryptocurrency wallets, revoke any permissions granted to suspicious domains, and conduct a thorough audit of your wallet transactions. Do not reuse passwords or seed phrases connected to this domain. For verification and safety guidance, use PhishDestroy's tools to cross-check the legitimacy of any cryptocurrency-related websites before engaging. This domain is marked as active and under investigation, so continued caution is strongly advised. Always navigate to cryptocurrency platforms directly via their official URLs to avoid falling victim to lookalike domains designed to steal your assets.