wwwcnoyu[.]net

PhishDestroy identifies wwwcnoyu.net as an active crypto drainer, a phishing variant designed to empty cryptocurrency wallets through deceptive transaction approvals. The risk level is set to under_investigation yet remains active, warranting immediate scrutiny due to the irreversible loss potential associated with wallet drainers. This classification is not generic phishing but specifically targets crypto assets by tricking users into authorizing malicious transactions.

Security telemetry for wwwcnoyu.net shows zero detections out of 95 scanners on VirusTotal (1/95), indicating evasion of current AV signatures. The domain was registered through Dynadot Inc on October 22, 2025, and resolves to IP 54.215.31.113. The site uses a Let's Encrypt SSL certificate, a common tactic to appear legitimate. No blocklists or trust score data are publicly available at this time, suggesting newly active infrastructure with low historical visibility.

To mitigate exposure to this crypto drainer, users must verify all wallet connection URLs against official sources and avoid entering seed phrases or signing unverified transactions. Block the IP 54.215.31.113 at the network level if encountered. Report the domain to PhishDestroy and your wallet provider. Always use hardware wallets or transaction simulation tools before approving transfers. Exercise extreme caution with domains registered in the last 30 days, as they often host zero-day phishing payloads. 0d74ca