araracoin[.]entrance-cryptolist[.]com

PhishDestroy identifies active phishing infrastructure on araracoin.entrance-cryptolist.com designed to steal cryptocurrency wallet credentials. When accessed, the page mimics a legitimate crypto-list directory to trick visitors into connecting wallets or entering private keys. Security scanners currently show 12/95 detections on VirusTotal, indicating the domain remains under the radar while actively harvesting user data. This domain was flagged during routine domain-safety monitoring and linked to IP address 188.114.96.3 on Cloudflare’s infrastructure. The SSL certificate, issued by Google Trust Services, helps the site appear legitimate and may lull victims into a false sense of security. Although registrar details are not provided in the data, the presence of a Google-issued certificate suggests recent registration, as such certificates are commonly obtained shortly after domain creation. If you visited araracoin.entrance-cryptolist.com or entered any wallet information, disconnect your device from the internet immediately and transfer remaining funds to a newly generated wallet on a clean device. Revoke any connected wallet permissions through your wallet software or hardware wallet interface. Report the incident to your wallet provider and consider enabling hardware wallet signing or multi-signature protections to prevent future unauthorized access. Monitor blockchain transactions for any unauthorized transfers and file a report with your local cybercrime unit.