skyscannervoos[.]com

PhishDestroy identifies skyscannervoos.com as a generic phishing domain operating an active crypto drainer kit that masquerades as a legitimate blockchain scanning service. The site lures victims with false promises of transaction analysis while covertly exfiltrating wallet credentials and draining assets. Security telemetry confirms a live campaign with no evidence of takedown as of the seed epoch 867ece.

This domain was flagged by 1 out of 95 VirusTotal engines, indicating limited but critical detection coverage. It is registered through Fewmoretaps OU d/b/a Trustname.com and resolves to IP 216.198.79.1. The domain was created on March 04 2026, placing it within a recent threat window. Google Safe Browsing (GSB) has not yet listed the domain, and public blocklists report zero prior detections. These technical indicators suggest a newly deployed, minimally tracked threat infrastructure deliberately designed to evade early-stage detection.

As of seed 867ece, skyscannervoos.com remains active and unblocked by major browsers or security vendors. Immediate containment requires network-level blocking of 216.198.79.1 and browser- or DNS-based blacklisting of the domain. Users encountering this site should report it to PhishDestroy and avoid all wallet-related interactions. Remaining risk is elevated due to active hosting, low vendor detection, and the domain’s plausible decoy branding. Proactive threat hunting for similar drainer domains is strongly advised to prevent downstream asset loss.