anondrainer[.]click

The domain anondrainer.click is a phishing site engaged in brand impersonation targeting Telegram users. It poses an elevated risk as a crypto drainer scam, designed to trick victims into connecting wallets and approving malicious transactions that siphon funds. No drainer kit was identified, but the site impersonates Telegram to lend credibility. As of the latest verification, anondrainer.click has been taken offline.

Technical indicators show limited but clear malicious activity. Only 1 of 95 VirusTotal security vendors flagged anondrainer.click, while Google Safe Browsing did not detect it. The domain appears on 2 security blocklists: PhishDestroy and ScamSniffer. It was registered through Tucows Domains Inc. on August 18, 2025, and resolves to the IP address 157.173.208.187, hosted by Hostinger International Limited in the US. The SSL certificate is issued by ZeroSSL RSA Domain Secure Site CA, and the observed page title was 'Пример'. Gridinsoft assigned a trust score of 0 out of 100.

Victims of anondrainer.click should immediately revoke all token approvals using a tool like Etherscan or Revoke.cash to prevent further unauthorized transactions. Move remaining funds to a new, secure wallet. If credentials were entered, change passwords for Telegram and any associated accounts, enable two-factor authentication, and monitor for fraudulent activity. Report the domain to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand’s security team to aid in takedown efforts.