dosugkrasnodara[.]pro

PhishDestroy identifies dosugkrasnodara.pro as an active crypto drainer domain posing a high risk to cryptocurrency users. The site leverages deceptive tactics to trick visitors into connecting wallets, enabling unauthorized fund transfers. Given the lack of detections on VirusTotal (1/95) and recent domain registration (April 26, 2026), this threat remains under the radar but is confirmed active. Users must exercise extreme caution when encountering this domain. This domain was flagged with the following indicators: SSL certificate issued by Let's Encrypt, resolving to IP 80.79.7.28, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and showing zero detections on VirusTotal at the time of analysis. The domain's newness (created April 26, 2026) suggests opportunistic deployment, while the registrar's association with high-risk domains raises further concerns. No blocklist entries or trustworthy reputation scores were identified during this assessment. To mitigate risk, users should immediately block dosugkrasnodara.pro via hosts file or firewall rules. Avoid interacting with any prompts to connect wallets or enter credentials. If funds are drained, report the incident to local authorities and cryptocurrency recovery services. Use hardware wallets with limited exposure and enable transaction confirmation alerts to detect unauthorized transfers promptly.