epoch-tea[.]com

This domain is assessed as high risk and is specifically flagged for crypto drainer activity. The domain epoch-tea.com was created on June 01, 2026, and remains active. Analysis indicates that the site is hosted on an IP address located in the United States, specifically 2606:4700:3033::6815:f9, which is part of the AS13335 Cloudflare, Inc. network. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently not flagged by VirusTotal, with a detection count of 0/95. However, the site has appeared on three security blocklists, including PhishDestroy, MetaMask, and SEAL, indicating a growing awareness of its malicious nature among security researchers.

Infrastructure analysis reveals that the domain uses an SSL certificate issued by Google Trust Services / WE1, which may lend a false sense of security to unsuspecting users. Despite the lack of VirusTotal detections, the domain's registration and hosting details suggest a well-organized campaign. The creation date of June 01, 2026, and the presence on multiple blocklists indicate that this threat has been active for a significant period and is likely to continue evolving. The current trust score and lack of broader detection highlight the importance of proactive security measures.

To mitigate the risks associated with this crypto drainer, users are advised to avoid clicking on any links or entering sensitive information on epoch-tea.com. Network administrators should consider blocking the domain and its associated IP address to prevent potential infections. Additionally, implementing multi-factor authentication and regularly updating security protocols can help protect against the specific tactics employed by this threat. Security software and browser extensions that monitor for phishing and crypto drainer activities should also be utilized to enhance detection and prevention capabilities.