acruast[.]com

PhishDestroy identifies acruast.com as an active crypto wallet drainer phishing domain targeting cryptocurrency users. The domain mimics legitimate crypto service branding to deceive victims into connecting their wallets, triggering unauthorized fund transfers via malicious drainer scripts. No specific drainer kit family was detected in available telemetry, but behavior aligns with generic cryptocurrency wallet drainer operations observed in recent campaigns.

This domain was flagged by 6 out of 95 VirusTotal security vendors, indicating elevated threat potential. It was registered through NAMECHEAP INC, resolves to IP 188.114.96.3, and holds a valid Google Trust Services SSL certificate. The domain was created on January 19, 2026, which is unusually recent for a confirmed malicious domain. Despite its new registration, the site has already accumulated multiple blocklist detections, though the exact count varies across threat intelligence feeds.

As of current analysis, acruast.com remains active and poses an elevated risk to cryptocurrency users. Security researchers recommend immediate blocking of the domain and associated IP at network and endpoint levels. Users are advised to avoid interacting with the site and verify URLs before connecting wallets. The domain’s recent creation and rapid detection suggest opportunistic targeting rather than long-term infrastructure, but the risk of ongoing phishing activity persists until takedown occurs.