octaipro2[.]com

PhishDestroy identifies octaipro2.com as an active crypto drainer domain designed to siphon cryptocurrency assets from unsuspecting users. The site masquerades as a legitimate crypto service but embeds malicious scripts to intercept wallet credentials and drain funds without authorization. Cryptocurrency drainers operate by tricking users into connecting their wallets or entering seed phrases on fraudulent interfaces, enabling attackers to transfer assets directly to controlled addresses. This domain was flagged under investigation on March 10, 2026, with a VirusTotal detection score of 1/95, indicating no antivirus engines currently flag it, likely due to its newly registered status or evasion techniques. The domain is registered through Gname.com Pte. Ltd. and resolves to IP 188.114.96.3, a known hosting infrastructure linked to fraudulent activities. Given the zero detections and fresh registration, there is a high risk of rapid escalation in exploitation as threat actors refine their campaigns. Users who visited octaipro2.com should immediately disconnect their wallets and revoke any connected permissions through their wallet interface. Do not enter seed phrases or private keys on any page linked from this domain. If assets were transferred, file a report with local cybercrime units and the blockchain forensic service. Monitor wallet activity for unauthorized transactions and consider transferring remaining funds to a newly generated, secure wallet address. Avoid clicking links from unsolicited messages or social media posts promoting crypto services.