click[.]dynclip[.]info

PhishDestroy has identified click.dynclip.info as a dangerous phishing domain specifically designed to operate as a crypto drainer. This threat targets cryptocurrency users by attempting to trick them into connecting their wallets or entering private keys, after which the site executes malicious transactions to drain funds. The domain was registered through NameSilo, LLC and resolved to IP address 188.114.97.3, with an SSL certificate issued by Google Trust Services / WE1, lending it a false sense of legitimacy.

Evidence of the threat is compelling. VirusTotal flagged this domain with 7 out of 95 security vendors marking it as malicious, and it appears on 1 security blocklist. The domain is currently offline, which is a positive development, but users who visited it before takedown may still be at risk. The elevated risk level underscores the importance of vigilance, as crypto drainers can cause irreversible financial loss.

If you have visited click.dynclip.info, take immediate action. Do not enter any credentials or connect any cryptocurrency wallets. Run a full security scan on your device using reputable software. If you provided any sensitive information, change your passwords and enable two-factor authentication on all accounts. For further assistance, visit PhishDestroy to verify other suspicious domains and report this threat to help protect others.