wmqhxusj[.]top

PhishDestroy identifies wmqhxusj.top as a newly active crypto drainer domain designed to impersonate legitimate login portals and steal cryptocurrency assets. This domain is currently under investigation but remains active, posing an immediate risk to unwary users who may interact with it. The threat involves a fraudulent login page that captures credentials or wallet information, enabling attackers to drain funds from compromised accounts without detection. This domain was flagged with 0 detections out of 95 on VirusTotal, indicating it has evaded initial detection systems. Registered through NameSilo, LLC on February 16, 2026, the domain resolves to IP 172.67.210.14 and holds a valid SSL certificate issued by Google Trust Services, adding a false sense of legitimacy. Its recent creation and clean record suggest it is part of a rapidly evolving threat campaign targeting crypto users. If you visited wmqhxusj.top, disconnect from the internet immediately, clear browser cache and cookies, and scan your device for malware. Verify any future URLs against PhishDestroy’s database before entering credentials or wallet information. Report the domain to PhishDestroy to help block its spread and protect others from this crypto drainer threat.