Typosquatting domain, using Drainer2.js to steal NFTs. The receiver address in the drainer script is 0x1E897644454e44C500a0F2c158050853474B811d This address has many outgoing transactions which lead to a much larger wallet 0x6910940164948FDafb087BfdfE75C0CeBdCf503e. This wallet has many outgoing transactions to 0xd5b6625c2bf78b9bd951f2d0bae275e3dc1c7612 which is being used to off-ramp many millions worth of funds to Binance 0x28C6c06298d514Db089934071355E5743bf21d60