share-pclymarket[.]com

This domain, share-pclymarket.com, is identified as a crypto phishing drainer site designed to compromise digital wallet credentials and siphon cryptocurrency assets. Analysis indicates no direct brand impersonation, but the infrastructure aligns with known drainer kits used to execute unauthorized transactions. The site employs deceptive prompts to trick users into connecting wallets, often leveraging urgency or fake reward mechanisms to bypass security awareness. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 188.114.96.3 and has been flagged by 4 out of 95 security vendors on VirusTotal. It appears on three security blocklists and holds a Gridinsoft trust score of 0/100, indicating high malicious confidence. Registered through NiceNIC International Group Co., Limited, the domain was created on February 21, 2026, suggesting a recently deployed attack vector. The page title 'Just a moment...' is consistent with cloaking techniques used to evade automated detection systems. No Google Safe Browsing (GSB) entries were recorded at the time of analysis. The domain is currently offline, reducing immediate exposure risk. However, historical data and infrastructure reuse patterns suggest potential reactivation or migration to alternative domains. Response actions include blocking the domain across multiple security layers, including wallet protection extensions and enterprise security gateways. Remaining risk persists due to the transient nature of such threats, requiring continuous monitoring of associated IP ranges and registrar activity. Users are advised to verify wallet connection prompts, scrutinize domain registration dates, and cross-reference with known blocklists before interacting with cryptocurrency-related sites.