yoroy-wallet[.]com

The domain yoroy-wallet.com has been confirmed as a crypto drainer site. This domain impersonates the Yoroi light wallet for Cardano, likely to deceive users into revealing sensitive information or to facilitate unauthorized cryptocurrency transfers.

Analysis indicates that yoroy-wallet.com has been flagged by 4 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection. The domain is registered through Cloudflare, Inc., and resolves to the IP address 172.67.221.248. It was created on April 17, 2026. The site is currently taken offline and appears on 1 security blocklist. The SSL certificate is issued by Google Trust Services, which may have initially lent credibility to the site, but the Gridinsoft trust score of 0/100 indicates a significant lack of trustworthiness.

The current status of the domain is offline, and it has been taken down. However, the risk remains elevated due to the potential for the domain to be reactivated or for the threat actors to use similar tactics on other domains. Security teams are advised to monitor for any reactivation and to educate users on the importance of verifying the authenticity of cryptocurrency wallet sites before entering any sensitive information. Additionally, network administrators should ensure that security policies are in place to block any known malicious domains and to perform regular audits of network traffic for signs of unauthorized activity.