authority-x[.]com

PhishDestroy identifies authority-x.com as an active crypto drainer campaign operating under the generic phishing threat type. The domain impersonates legitimate cryptocurrency or financial service brands to deceive users into connecting wallets and initiating unauthorized transactions. While the exact impersonated brand is not specified in current intelligence, the domain’s configuration aligns with known drainer kit behaviors, including fraudulent transaction signing prompts and fake balance displays. This domain resolves to IP address 188.114.96.3 and is associated with a Let's Encrypt SSL certificate, suggesting an attempt to appear legitimate. VirusTotal currently shows 0 detections out of 95 scanners, indicating low signature-based detection. The domain was registered through Dynadot LLC on April 15, 2026, and remains unflagged by Google Safe Browsing (GSB) and other major blocklists. These characteristics suggest a recently deployed, potentially adaptive threat designed to evade initial detection. As of the latest assessment, authority-x.com is active and under investigation. Immediate mitigation includes domain blocking and user education to avoid wallet connections. Remaining risk is assessed as moderate due to the lack of detection coverage and recent domain registration. Users are advised to verify unknown domains via PhishDestroy before engaging in any transactional activity.