st2[.]abqweather[.]com

PhishDestroy identifies st2.abqweather.com as an active crypto drainer posing as a weather service provider.

This domain, registered through ENOM, INC., resolves to IP 185.149.120.183 and was created on August 09, 2000. It carries a Let's Encrypt SSL certificate and remains unflagged by VirusTotal with 0 detections out of 95 vendors. The absence of blocklist entries and low reputation scores suggest this threat is currently under investigation but remains operational. Trust scores from various engines are pending or unavailable, indicating a need for heightened scrutiny.

While the exact blocklist count and trust scores are not yet documented, the domain's prolonged existence since 2000 combined with its unflagged status on VirusTotal raises concerns about potential evasion of detection mechanisms. Users are advised to avoid interacting with this domain, as it may deploy malicious scripts to drain cryptocurrency wallet credentials under the guise of providing weather updates. Immediate verification on PhishDestroy or similar threat intelligence platforms is recommended. If already interacted with, disconnect devices from the internet, revoke wallet access, and scan for malware using reputable security tools.