king-slotdrivesystem[.]click

PhishDestroy identifies king-slotdrivesystem.click as an active crypto drainer domain posing as a slot drive systems brand. This domain attempts to deceive users into connecting crypto wallets under the guise of legitimate system utilities, enabling unauthorized fund transfers. The site reportedly leverages fake tool downloads or trojanized drivers to inject drainer scripts targeting Ethereum, Solana, and other EVM-compatible chains. While no specific drainer kit hash is publicly available, the domain’s infrastructure and low VT detection rate suggest operation under a newly deployed or obfuscated malware family commonly used in crypto phishing campaigns.

Technical indicators confirm elevated risk: the domain resolves to IP 104.21.69.203 and was registered on March 08, 2026, through Dynadot, LLC. It holds a valid Let’s Encrypt SSL certificate for HTTPS obfuscation. Google Safe Browsing (GSB) currently lists this domain as unsafe, and VirusTotal reports a detection rate of just 1 out of 95 security engines, indicating poor coverage by standard defenses. Blocklists such as PhishTank or OpenPhish may not yet include this entry due to its recent creation.

This domain remains active and has not been sinkholed. Users should block access at the network and DNS level using threat intelligence feeds that include this indicator. Deploy browser-level protections and endpoint detection rules referencing IP 104.21.69.203 and domain king-slotdrivesystem.click. Remaining risk is high due to fresh registration, low detection, and active deployment in crypto communities. Immediate blocking and user alerting are recommended to prevent wallet compromise.