oillesscoin[.]lol

PhishDestroy identifies oillesscoin.lol as an active drainer phishing domain designed to deceive users into connecting cryptocurrency wallets and approving malicious transactions. The domain impersonates a legitimate-sounding cryptocurrency project, leveraging urgency and perceived legitimacy to trick users into surrendering assets. While no specific brand or drainer kit has been publicly disclosed, the infrastructure aligns with typical drainer-as-a-service operations targeting decentralized finance participants.

This domain was flagged with a VirusTotal detection score of 7/95, indicating it has evaded antivirus engines and sandbox detections at the time of analysis. It resolves to IP 188.114.97.3 and uses a Let's Encrypt SSL certificate to appear trustworthy. Registered on March 09, 2026 via Global Domain Group LLC, the domain has already been blocked by OISD and Maltrail. It currently appears on two security blocklists, placing it in the early stages of threat intelligence coverage.

The domain remains active and under investigation, with no current detections in VirusTotal despite blocklist presence. Organizations are advised to block the domain at the network and DNS levels, monitor for outbound connections to 188.114.97.3, and warn users against visiting oillesscoin.lol. Although the immediate risk is moderate due to limited coverage, the absence of detections and fresh registration suggest potential for escalation. Proactive blocking and user awareness remain critical pending further forensic analysis.