web3xorqevin[.]top

PhishDestroy identifies active phishing risks on web3xorqevin.top, specifically targeting cryptocurrency wallets through deceptive impersonation tactics. This domain employs a classic wallet drainer scheme, designed to trick users into connecting their wallets and unknowingly granting malicious smart contracts permission to drain assets. The threat is currently under investigation but remains active, posing immediate danger to visitors interacting with the site.

This domain was flagged by MetaMask and SEAL security systems, and appears on 2 security blocklists including VirusTotal. VirusTotal currently reports 4/95 detections despite these red flags. Technical indicators reveal this domain resolves to IP 172.67.181.34 and was registered through NameMart Pte. Ltd. on April 04, 2026. The site maintains a Let’s Encrypt SSL certificate, suggesting an attempt to appear legitimate while carrying out malicious activities.

To protect against wallet drainers like web3xorqevin.top, users should never connect wallets to unfamiliar websites or dApps. Always verify URLs against official sources before any blockchain interaction. Use hardware wallets or wallet guard features that block suspicious contract permissions. If you’ve already connected a wallet, immediately revoke suspicious permissions through your wallet’s security settings or use tools like revoke.cash. Report such domains to your wallet provider and block them immediately.