intel-erymax-pro[.]today

This domain, intel-erymax-pro.today, is flagged as a generic phishing site targeting users with fraudulent cryptocurrency trading services. The site masquerades as an official platform for "Intel Erymax Pro," offering real-time market alerts and analysis to deceive victims into disclosing sensitive financial information or transferring cryptocurrency. No evidence of a specific drainer kit was identified, but the domain’s infrastructure and branding align with common crypto-phishing tactics observed in recent campaigns. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 172.67.183.204 and was registered on February 21, 2026, through NiceNIC International Group Co., Limited. It is protected by Cloudflare, utilizing technologies such as Envoy, HSTS, and HTTP/3, with an SSL certificate issued by Google Trust Services. The domain appears on 2 security blocklists, including PhishDestroy and OISD, and has a VirusTotal detection score of 10/95 from security vendors. Despite its claims of legitimacy, the domain holds a Gridinsoft trust score of 0/100, further confirming its malicious nature. As of the latest assessment, intel-erymax-pro.today has been taken offline, likely in response to detection and blocklisting. However, the domain’s recent creation date and use of bulletproof infrastructure suggest potential for re-emergence under a similar or altered identity. Users are advised to treat any communication or links associated with this domain as malicious and to verify cryptocurrency platforms through official channels only. Organizations should update blocklists to include this domain and monitor for related phishing activity targeting financial or crypto-related services.