goida[.]cfd

PhishDestroy identifies goida.cfd as an active crypto drainer posing as a legitimate wallet authentication portal. The domain leverages deceptive branding to trick users into entering private key or seed phrase information, enabling attackers to drain cryptocurrency holdings directly from connected wallets. This operation mirrors common crypto-scamming tactics where fraudulent domains impersonate popular services like MetaMask, Trust Wallet, or Ledger to exploit user trust. The site’s interface is designed to closely mimic real wallet interfaces, increasing the likelihood of successful theft. This domain was flagged by PhishDestroy due to 0 detections out of 95 VirusTotal scanners, indicating it remains under the radar of mainstream security tools. The domain was registered through Fewmoretaps OU (d/b/a Trustname.com) on March 6, 2026, a red flag given its recent creation and use of a privacy-focused registrar. The domain resolves to IP address 217.144.184.106 and utilizes a Let’s Encrypt SSL certificate to appear legitimate. Despite these superficial markers of validity, the site’s lack of detection history and suspicious registration details signal a high-risk scam operation. Users who visited goida.cfd should immediately disconnect any connected cryptocurrency wallets, revoke permissions granted to unknown domains, and transfer remaining assets to a secure wallet. Do not enter any private keys, seed phrases, or wallet passwords on this site. Run a full antivirus scan to check for spyware or keyloggers. Report the domain to PhishDestroy and your wallet provider. Avoid reopening the domain, as repeated exposure increases infection risks. Always verify URLs through PhishDestroy’s database before interacting with crypto-related websites.