drakelore[.]com

PhishDestroy identifies drakelore.com as a recently activated crypto-draining domain harvesting wallet credentials and seed phrases under the guise of a legitimate brand. When victims connect their wallets, hidden scripts silently approve unlimited token transfers before users even see a balance update. Wallet software that signs “blind” messages or “connect” permissions without the user seeing the exact transaction terms is especially vulnerable to this class of attack, which can empty funds in seconds once approval is given. This domain was flagged on 2 of 95 VirusTotal scanners within hours of its April 04, 2026 creation. Its SSL certificate comes from Let’s Encrypt, a common free issuer seen on both legitimate sites and malicious impersonations. The registrar Fewmoretaps OU d/b/a Trustname.com has issued numerous domains linked to recent drainer campaigns, and the site resolves to the bulletproof-hosting IP 172.67.168.185, a known bulletproof range frequently associated with short-lived malicious infrastructures. If you visited drakelore.com, immediately revoke any wallet permissions via your wallet’s “Connected Apps” or “Revoked” dApp list. Do not reconnect until you have cleared recent transaction approvals and updated your wallet software to the latest release that shows plain-language transaction previews instead of opaque hex signatures. Scan your browser history for remnants of drakelore.com and run a full antivirus scan; reset passwords for all online accounts that share browser sessions with crypto wallets.