megamega[.]cc

PhishDestroy flags megamega.cc as an active crypto drainer domain under investigation, with no current VirusTotal detections and a newly registered SSL certificate via Google Trust Services.

This domain resolves to IP 172.67.147.254 and was created on September 24, 2022, through NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal currently reports 6/95 detections, indicating this campaign remains undetected by most antivirus engines. The domain’s SSL certificate is issued by Google Trust Services, a factor that may increase user trust despite malicious intent. No brand impersonation or known drainer kit signatures have been publicly linked to this domain at this time, but the lack of detections suggests an emerging threat.

Current status shows the domain is active and propagating as a generic phishing page. Immediate actions include blocking the domain at the network level, flagging the associated IP in firewall rules, and updating endpoint protection to detect crypto drainer behavior. The risk remains high due to undetected status and active propagation, warranting heightened monitoring and user awareness campaigns to prevent cryptocurrency theft.