asszzk[.]top

This domain, asszzk.top, is identified as a cryptocurrency wallet drainer designed to steal digital assets from unsuspecting users. Analysis indicates the site likely presented itself as a legitimate wallet service or crypto exchange interface, tricking visitors into entering private keys or seed phrases. Once credentials were input, the site would automatically siphon funds to attacker-controlled wallets, a tactic commonly associated with phishing campaigns targeting the cryptocurrency ecosystem. The absence of an SSL certificate further suggests a lack of basic security measures, increasing the risk of credential interception during transmission. Infrastructure analysis reveals the domain was registered on March 8, 2026, through Web Commerce Communications Limited, a registrar frequently associated with high-risk domains. The site resolves to the IP address 45.64.113.35, located in Hong Kong under AS55933 (Cloudie Limited), a network segment with a history of hosting malicious infrastructure. At the time of detection, asszzk.top was flagged by 18 out of 95 security vendors on VirusTotal, with one additional blocklist entry from PhishDestroy. The domain’s rapid takedown aligns with patterns observed in short-lived phishing operations, where attackers frequently rotate infrastructure to evade detection. Users who visited asszzk.top or entered sensitive information should assume their credentials or wallet details have been compromised. Immediate actions include revoking any connected wallet sessions, transferring remaining funds to a new wallet with a fresh seed phrase, and monitoring transaction histories for unauthorized activity. Device scans using updated security tools are recommended to detect potential malware or keyloggers. Due to the elevated risk of financial loss, affected individuals should report the incident to relevant cryptocurrency platforms and local cybersecurity authorities to aid in tracking the campaign’s infrastructure.