soft-girls[.]life

PhishDestroy identifies soft-girls.life as an active crypto drainer site designed to trick users into connecting cryptocurrency wallets and stealing funds. The domain masquerades as a community portal for 'soft girls,' a niche online aesthetic trend, but its true purpose is to harvest private keys or authorize malicious transactions. Visitors are lured through social media links, fake giveaways, or impersonation of related fan pages. Once connected, wallet-draining scripts execute unauthorized transfers, often draining accounts within seconds. Security teams should block access and investigate wallet activity for signs of compromise. This domain was flagged after being registered on March 27, 2026, via PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to IP 104.21.80.46 with a Let's Encrypt SSL certificate. VirusTotal shows 3 out of 95 antivirus engines flagging the domain as malicious—indicating it is newly active and not yet widely recognized by scanners. The lack of detections is concerning, as it allows the threat to propagate unchecked. Given the short operational window (under one day), the absence of blocklist entries is expected but highlights the need for proactive user vigilance. Users who visited soft-girls.life should immediately disconnect their cryptocurrency wallets and revoke any unauthorized permissions granted to the site. Check transaction logs for any suspicious outbound transfers and consider transferring remaining funds to a new, secure wallet. If you suspect wallet compromise, report the incident to your wallet provider and consider freezing the account. Avoid re-engaging with the site and warn others in the community. Use PhishDestroy to verify the safety of similar links before clicking. Stay safe and verify twice.