drakeowl[.]com

PhishDestroy identifies drakeowl.com as a generic phishing domain hosting a cryptocurrency-draining operation. The page impersonates a well-known brand but carries no drainer kit signature, suggesting either an emerging clone or a re-skinned template. No obfuscated JavaScript payloads were observed in passive scans, and the landing page remains static at the time of analysis. The threat aligns with recent campaigns targeting Web3 users through typosquatted domains and fake giveaways.

Technical indicators for drakeowl.com are as follows: VirusTotal score 15/95 detections, IP address 188.114.96.3, domain creation date March 09 2026, registrar NICENIC INTERNATIONAL GROUP CO., LIMITED, SSL certificate issued by Let’s Encrypt. Google Safe Browsing currently lists the domain as unflagged, and public blocklist aggregators show zero prior listings. These pristine metrics indicate a recently activated infrastructure with minimal historical footprint.

As of this report drakeowl.com remains active and under investigation by PhishDestroy’s real-time crawlers. The domain is not yet blocked by major browsers or security vendors, creating an elevated risk for visitors. Users are advised to avoid any interaction and to submit a report via PhishDestroy to accelerate takedown efforts. Remaining risk is high due to active hosting, valid TLS, and lack of third-party detections, warranting continued monitoring until the domain is sinkholed or blacklisted.