# checking-wallets.pro — SUSPICIOUS

> checking-wallets.pro is a crypto drainer domain flagged by 3 of 95 VirusTotal vendors. Immediate block recommended to prevent fund theft.

## Summary
checking-wallets.pro is a confirmed crypto drainer domain currently active and distributing malicious payloads. The threat involves unauthorized cryptocurrency fund transfers facilitated through deceptive wallet verification schemes. This domain is designed to trick users into connecting their wallets, triggering silent transactions that drain balances without consent. The infrastructure is operational and poses an elevated risk to digital asset holders engaging with unverified platforms.  

This domain was flagged by 3 of 95 VirusTotal security vendors, indicating limited but actionable detection coverage. It was registered through Web Commerce Communications Limited dba WebNic.cc, resolved to IP 188.114.97.3, and issued a Let’s Encrypt SSL certificate. The domain was created on March 23, 2026, suggesting a recently deployed threat aimed at exploiting early trust signals. With only 3 vendors detecting it, the gap in detection underscores the need for proactive threat intelligence and user-side vigilance.  

Given the confirmed crypto drainer activity and recent domain registration, checking-wallets.pro should be immediately blocked at network and endpoint levels. Users are advised to avoid any interaction with this domain or associated IPs. Security teams should monitor for connections to 188.114.97.3 and scan endpoints for wallet connection attempts. Implementing DNS filtering, browser blocklists, and user awareness training on crypto transaction risks is strongly recommended to mitigate exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-23 08:50:57
- Registrar: Web Commerce Communications Limited dba WebNic.cc
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ce65ceb3-3215-4a69-9017-e813c7008ab2
- PhishDestroy: https://phishdestroy.io/domain/checking-wallets.pro/
- LLM endpoint: https://phishdestroy.io/domain/checking-wallets.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/checking-wallets.pro/
Last updated: 2026-03-23