ouyi[.]systems

PhishDestroy identifies ouyi.systems as an active crypto drainer domain, posing a high risk to users' cryptocurrency assets. This domain is under investigation for phishing activities specifically targeting crypto wallet credentials and transaction approvals. The site leverages deceptive tactics to trick users into connecting wallets or signing malicious transactions, leading to irreversible fund losses. Technical analysis confirms the domain is operational and distributing malicious payloads, with no current detections on VirusTotal as of the latest scan.

This domain was flagged by PhishDestroy due to its suspicious behavior and lack of legitimate indicators. ouyi.systems resolves to IP 54.215.31.113, registered through Dynadot Inc on October 02, 2025. The domain uses a Let's Encrypt SSL certificate to appear legitimate, though this is a common tactic among malicious actors. As of now, VirusTotal reports 3/95 detections, indicating it has evaded initial detection by antivirus engines. The domain's recent creation date and hosting infrastructure further contribute to its high-risk classification. Trust scores and blocklist entries are pending further investigation, but preliminary data suggests a strong likelihood of malicious intent.

To mitigate risks associated with this crypto drainer, users must avoid interacting with ouyi.systems entirely. If you've already visited the site, disconnect your wallet immediately and revoke any connected permissions via your wallet's settings. Scan your device for malware using reputable security tools like Malwarebytes or Windows Defender. Report the domain to PhishDestroy and your browser's safe browsing program to help block future access. Always verify URLs manually and use hardware wallets for transactions to minimize exposure to drainer scripts. Stay vigilant—crypto drainers often mimic legitimate platforms to exploit user trust.