portaldtrdigital26exclu[.]weebly[.]com

PhishDestroy identifies portaldtrdigital26exclu.weebly.com as a live crypto-draining login portal designed to steal wallet credentials and drain digital assets. The site mimics a legitimate digital tax or financial service login page, tricking users into entering sensitive information like private keys or recovery phrases. Once submitted, the credentials are harvested by attackers, who then gain full control over connected cryptocurrency wallets, leading to irreversible fund theft. This domain was flagged due to its active role in credential harvesting with 0 detections out of 95 VirusTotal scans at the time of analysis. It was created on March 29, 2006, and is registered through MarkMonitor, Inc., a registrar often abused for impersonation campaigns. The site resolves to IP 74.115.51.8 and uses a Let’s Encrypt SSL certificate to appear trustworthy, despite its malicious intent. If you visited this site or entered any credentials, disconnect your wallet immediately and revoke all session permissions via your wallet’s security settings. Do not approve any unexpected transactions. Scan your device with reputable antivirus software and change passwords used on this domain. Report the domain to PhishDestroy and your local cybercrime unit. Always verify URLs through trusted sources before entering sensitive data.