cnouyi[.]pro

PhishDestroy identifies cnouyi.pro as an active crypto drainer scam posing as a legitimate crypto service. This domain, registered on February 05, 2025, has not yet been flagged by 95 VirusTotal engines and resolves to IP 54.215.31.113. Hosted through Dynadot Inc with a Let's Encrypt SSL certificate, it remains undetected by major blocklists despite its high-risk profile. This domain exhibits classic red flags: a recent registration date (Feb 05, 2025), zero detections (2/95) on VirusTotal at time of analysis, and hosting on a cloud IP (54.215.31.113). The use of Let's Encrypt suggests an attempt to appear legitimate, while registration through Dynadot Inc provides no additional trust due to bulk registration services. The absence of blocklist entries indicates either newness or evasion tactics, but active monitoring reveals crypto drainer patterns. Immediate mitigation requires users to verify all crypto-related domains through PhishDestroy's real-time scanner. Never enter wallet credentials or approve transactions on unconfirmed domains. Report this site to PhishDestroy for immediate takedown action. Block the IP 54.215.31.113 at network/firewall levels if crypto services are used operationally.