105633222[.]com

The domain 105633222.com has been identified as a generic phishing threat, specifically a crypto drainer designed to steal cryptocurrency wallet credentials. While no specific brand impersonation was detected, the site's infrastructure and behavior are consistent with phishing campaigns targeting digital asset holders. The domain was registered through GoDaddy.com, LLC on January 17, 2023, and resolves to IP address 104.21.2.139.

Technical indicators are highly concerning: VirusTotal reports 18 out of 95 security vendors flagging this domain as malicious, and it appears on one security blocklist. AlienVault OTX has recorded it in one threat intelligence pulse. The SSL certificate is issued by Google Trust Services (WE1), which is common for legitimate sites but also frequently abused by phishers. Google Safe Browsing status was not explicitly provided, but the domain's current offline status suggests it has been taken down after detection.

As of the latest check, 105633222.com is offline, indicating that hosting providers or registrars have responded to abuse reports. However, the underlying IP address may still host other malicious domains, and the threat actors may re-register similar domains. Users should remain vigilant against unsolicited messages linking to unknown domains, especially those involving cryptocurrency transactions. PhishDestroy recommends avoiding any interaction with this domain and using security tools that block known phishing sites.