securitys-verifications[.]xyz

PhishDestroy identifies securitys-verifications.xyz as an active cryptocurrency drainer kit posing as a security verification portal. The domain mimics legitimate brand infrastructure to trick users into connecting wallet extensions or submitting seed phrases, resulting in immediate asset exfiltration. No specific brand is mimicked in known campaigns, suggesting a generic but highly targeted approach aimed at crypto holders seeking ‘security checks’ or ‘verification services’. This domain was registered on May 06, 2026 through Dynadot LLC and resolves to IP 172.67.221.49. VirusTotal reports a low detection rate of 3 out of 95 security vendors, indicating minimal coverage in automated threat feeds. The domain holds a valid Let’s Encrypt SSL certificate, enhancing its appearance of legitimacy. Current blocklist counts remain unconfirmed, but the low VT score suggests it may evade standard defenses. The domain’s youth and low detection profile increase the risk of successful user compromise. As of the latest analysis, securitys-verifications.xyz remains active and unblocked by major browsers and security platforms. Immediate action includes network-level blocking via DNS filtering and manual URL blacklisting in enterprise and personal security tools. Users are strongly advised to avoid interacting with this domain, verify any ‘security’ requests through official channels, and report suspicious URLs to their security teams or platforms like PhishDestroy. Remaining risk is elevated due to the domain’s recent registration, low detection, and plausible branding, making it a persistent threat to crypto users.