yadovitoitochka[.]shop

PhishDestroy identifies yadovitoitochka.shop as a live crypto drainer posing significant risks to cryptocurrency users. This fraudulent domain mimics legitimate services to trick victims into connecting crypto wallets and authorizing malicious transactions. Once a user interacts with the site, malicious scripts load, draining funds directly from connected wallets without additional approval. The site leverages deceptive tactics such as fake airdrops, giveaways, or urgent notifications to pressure users into taking immediate action, a hallmark of crypto drainer operations. This domain was flagged with 0 detections out of 95 engines on VirusTotal, indicating it remains under the radar of most security tools. The domain resolves to IP address 188.137.252.97 and uses a Let's Encrypt SSL certificate to appear legitimate. Registered recently, the domain is likely part of a fast-moving campaign targeting crypto enthusiasts. The registrar information and hosting infrastructure suggest a lack of due diligence, further increasing the risk profile of this threat actor. If you visited yadovitoitochka.shop, disconnect your wallet immediately and revoke any unauthorized permissions through your wallet interface or a reputable revocation service like revoke.cash. Do not interact further with the site. Report the domain to your antivirus provider and consider scanning your system for malware. Avoid entering any credentials or connecting wallets to unknown sites, especially those promoting unrealistic offers. Stay alert for unusual transaction notifications from your wallet provider. Monitor your transaction history closely for any unauthorized transfers.