defiedexpot[.]com

PhishDestroy identifies defiedexpot.com as an active crypto drainer site under investigation. The domain is not yet flagged on VirusTotal (6/95 detections as of seed 3941f4), suggesting a recently deployed or sandbox-evasive campaign. The domain shows no branding alignment with legitimate crypto exchanges or service providers, indicating a targeted malicious infrastructure designed to intercept and drain cryptocurrency transactions.

This domain resolves to IP 188.114.97.3 and is registered through Gname.com Pte. Ltd. The SSL certificate is issued by Google Trust Services, which may be misused to enhance trust perception. The domain was created on January 23, 2026, indicating a very recent emergence. VirusTotal currently shows 6/95 detections, and there is no evidence of inclusion on major blocklists such as Google Safe Browsing (GSB) or PhishTank as of the current intelligence window. The absence of blacklist flags suggests this domain may still be propagating or leveraging evasion techniques.

As of this report, defiedexpot.com remains active and unblocked by most security systems. While domain reputation is low due to recent creation and zero detections, the risk remains elevated for cryptocurrency users interacting with unknown links or QR codes. Immediate safety actions include blocking IP 188.114.97.3 and domain defiedexpot.com at the network and endpoint levels. Users should also revoke any transaction approvals given to this domain and scan connected wallets for unauthorized transfers using tools such as WalletConnect history review. Remaining risk is assessed as HIGH due to active status, crypto-specific threat intent, and current lack of detection coverage, necessitating urgent preventative measures.