imperialcrown[.]bond

imperialcrown.bond is currently under active investigation for hosting a crypto drainer phishing operation. The domain is flagged as a generic_phishing threat and is actively resolving to a malicious payload distribution server. No specific brand impersonation has been confirmed, but the domain’s recent registration and SSL issuance suggest an imminent impersonation campaign targeting cryptocurrency users. Immediate caution is advised for all visitors. PhishDestroy identifies that imperialcrown.bond was registered on March 21, 2026 through Fewmoretaps OU d/b/a Trustname.com, resolving to IP address 188.114.97.3. The domain is secured with a Let's Encrypt SSL certificate. As of the latest scan, 9 out of 95 VirusTotal vendors have flagged this domain. There is no known presence on major blocklists, and domain trust scores remain critically low due to its newly registered status and suspicious infrastructure alignment. The IP address 188.114.97.3 has been historically associated with low-trust hosting environments and shows no reputation for legitimate services. The current status of imperialcrown.bond remains under investigation, but the threat level is assessed as high-risk due to the combination of new registration, crypto drainer intent, and lack of vendor detections. Users are strongly advised not to interact with this domain, avoid clicking links, and verify any related URLs using PhishDestroy’s real-time scanning tool before accessing. Organizations are recommended to block the domain and IP at the network and DNS levels to prevent access. Continuous monitoring is advised as this domain may escalate to full impersonation of a major financial or crypto brand.