famfort[.]top

PhishDestroy identifies famfort.top as an active crypto drainer domain designed to steal cryptocurrency from unsuspecting users. This domain employs social engineering tactics to trick victims into connecting crypto wallets or entering seed phrases, enabling direct asset exfiltration. The site masquerades as a legitimate service or giveaway platform, exploiting trust to facilitate unauthorized transactions. Threat actors behind this campaign leverage deceptive user interfaces and urgent language to pressure victims into making irreversible financial decisions. Technical analysis confirms this domain is engineered specifically for crypto theft, with no legitimate use case beyond fraudulent operations. This domain was flagged by 16 out of 95 VirusTotal security vendors, indicating a high detection rate among industry-leading tools. Registered through PDR Ltd. d/b/a PublicDomainRegistry.com, famfort.top was created on March 10, 2026, and resolves to IP address 104.21.8.30. The domain also utilizes a Let's Encrypt SSL certificate, a tactic commonly exploited by threat actors to appear legitimate. These indicators, combined with the domain's recent creation and low reputation, strongly suggest a malicious campaign in its early stages. If you have visited famfort.top, disconnect your wallet immediately and revoke any connected permissions via your wallet’s settings. Do not enter any private keys, seed phrases, or recovery information on this domain. Scan your device for malware using reputable antivirus software, as some crypto drainers deploy keyloggers or clipboard hijackers to capture credentials. Report the domain to your wallet provider and relevant cybersecurity authorities. Avoid interacting with this domain or any associated links, and warn others about this fraudulent activity to prevent further victimization.