kushyprod420[.]info

PhishDestroy identifies kushyprod420.info as an active crypto drainer domain masquerading as a legitimate cannabis brand, specifically targeting users seeking Kush-related products. This site employs deceptive tactics to trick visitors into connecting crypto wallets or entering login credentials, which are then exploited to drain funds or steal credentials. The domain was registered on May 04, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and currently resolves to IP 188.114.96.3 with a valid Let's Encrypt SSL certificate, adding a false sense of legitimacy. At the time of this assessment, VirusTotal reports 0 detections out of 95 antivirus engines, indicating a low immediate threat visibility despite its malicious intent. This domain exhibits multiple red flags consistent with crypto drainer campaigns. The unusually recent creation date (May 04, 2026) suggests a hastily deployed operation, while the use of NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar is common among malicious actors due to lax oversight. The Let's Encrypt SSL certificate further obscures the site's true nature, as phishing domains frequently leverage free certificates to appear trustworthy. Additionally, the domain name closely mimics legitimate cannabis brands, a tactic known as typosquatting, designed to lure unsuspecting visitors into a false sense of security. The lack of blocklist entries at this stage underscores the importance of proactive threat detection, as static blacklists often lag behind emerging threats. If you have visited kushyprod420.info, immediately disconnect your wallet from the site and revoke any connected permissions through your wallet provider’s interface. Do not enter any login credentials or personal information. Scan your system for malware using a reputable antivirus tool, and consider changing passwords for any accounts exposed during the visit. PhishDestroy recommends reporting the domain to your browser’s safe browsing tools or security extensions to help prevent others from falling victim. Stay vigilant and verify suspicious links using PhishDestroy’s real-time threat intelligence before interacting.