pandez-lab[.]com

PhishDestroy identifies pandez-lab.com as an active crypto drainer phishing domain currently under investigation for malicious intent. The domain is engineered to deceive users into transferring cryptocurrency to attacker-controlled wallets under the false pretense of legitimate services. Multiple security vendors and browser extensions have flagged this domain as hostile, indicating coordinated detection efforts are underway to neutralize this threat vector.

This domain was flagged by 1 out of 95 VirusTotal vendors as of the latest scan, demonstrating a concerning lack of detection despite clear malicious indicators. It was registered via NICENIC INTERNATIONAL GROUP CO., LIMITED, resolving to IP address 188.114.96.3. Notably, pandez-lab.com is already blocked by MetaMask and SEAL security systems. The domain was created on May 06, 2026, and currently appears on 2 independent security blocklists. These technical indicators collectively suggest a recently deployed but rapidly evolving threat infrastructure with agile operational tactics.

As this domain remains active and continues to evade detection by major scanning engines, PhishDestroy advises immediate action for all users. Avoid accessing pandez-lab.com entirely and warn others in your network. If you have previously interacted with this domain—especially entering wallet credentials or initiating transactions—revoke any connected wallet permissions immediately and transfer remaining assets to a new wallet. Use hardware wallets or reputable software wallets with built-in phishing protections. Report this domain to your antivirus provider, browser security extensions, and relevant blockchain monitoring services such as MetaMask or SEAL. Monitor wallets for unauthorized transactions and consider enhanced monitoring tools like Etherscan’s alert services for suspicious activity.