store[.]isaaclomman[.]com

PhishDestroy has flagged store.isaaclomman.com as an active crypto drainer scam impersonating a legitimate online retail store. The domain, registered on September 1, 2010, is hosted on IP 23.227.38.74 and leverages a Let's Encrypt SSL certificate to appear trustworthy. This site is designed to deceive users into connecting their cryptocurrency wallets, where a drainer kit silently transfers funds to attacker-controlled addresses under the guise of a transaction approval or order confirmation. The domain’s age and SSL certificate contribute to its deceptive credibility, making it a high-risk threat for unsuspecting victims.

Technical indicators reveal a concerning lack of detection, with 0 out of 95 VirusTotal engines flagging this domain as malicious as of the latest analysis. The domain is registered through Dreamscape Networks International Pte Ltd and operates without any known blocklist presence, further complicating early detection. The IP address 23.227.38.74 is associated with multiple low-reputation activities, and the domain’s 14-year age may be exploited to bypass newer threat intelligence filters. These factors combine to create a stealthy and persistent phishing threat.

As of the investigation, store.isaaclomman.com remains active, with PhishDestroy continuing to monitor its operations. Immediate response actions include domain takedown requests and IP de-listing efforts, though the domain’s longevity and lack of detections pose challenges. The remaining risk is classified as active and under investigation, with users strongly advised to verify URLs via PhishDestroy before engaging. Avoid connecting wallets or entering personal information on this domain to prevent financial loss.