register-morico[.]com

The domain register-morico.com has been identified as a generic phishing threat, specifically a crypto drainer designed to trick users into connecting their wallets under the guise of a meme coin called $MORI Coin. The site impersonated the fictional character Professor Moriarty, likely to lure fans of the villain-themed token. As of the latest analysis, the domain has been taken offline, but its short-lived activity posed a significant risk to cryptocurrency enthusiasts.

Technical analysis reveals that the domain was registered through MAT BAO CORPORATION on February 21, 2026, and resolved to IP address 172.67.143.52. It was flagged by 3 out of 95 VirusTotal security vendors and appeared on 2 security blocklists. The SSL certificate was issued by Google Trust Services (WE1), which may have given the site a false sense of legitimacy. Despite being flagged by only a few vendors, the nature of the threat—a crypto drainer—makes it particularly dangerous as it could lead to direct financial loss.

Given that the domain is now offline, the immediate risk is reduced, but users who may have visited the site or interacted with it should take precautions. PhishDestroy recommends that anyone who connected a wallet or entered credentials on register-morico.com should revoke permissions immediately and move funds to a new wallet. Always verify the authenticity of crypto-related sites through official channels and use tools like PhishDestroy to check domain safety before interacting. Stay vigilant against similar phishing campaigns targeting popular meme coins or fictional characters.