# i-wholesaler.com — SUSPICIOUS

> i-wholesaler.com is a crypto drainer impersonating wholesalers. Flagged by OISD, it has 2/95 VirusTotal detections.

## Summary
PhishDestroy identifies i-wholesaler.com as an active crypto drainer posing as a wholesale supplier. This elevated-risk domain (seed 92b3e8) is designed to trick users into connecting crypto wallets or entering payment details, resulting in immediate fund theft. The site exploits urgency and trust in wholesale transactions to bypass user skepticism, making it particularly dangerous for cryptocurrency users engaging in bulk purchasing or supplier verification.  This domain was flagged by OISD and resolves to IP 198.251.84.200, which hosts multiple high-risk sites. Registered through Global Domain Group LLC on October 14, 2023, i-wholesaler.com carries a Let's Encrypt SSL certificate to appear legitimate. It has 2 detections out of 95 security vendors on VirusTotal, indicating low but present recognition of its malicious nature. While only one blocklist currently lists it, its recent creation and association with a known malicious IP suggest rapid deployment for targeted attacks.  To mitigate exposure to this crypto drainer, users should avoid clicking links from unsolicited emails or ads claiming to offer wholesale deals. Always verify supplier websites by typing the domain directly into the browser and cross-checking SSL certificates. Never connect crypto wallets or enter payment details on i-wholesaler.com or similar domains without independent verification through trusted platforms like PhishDestroy. Organizations should also monitor network traffic for connections to 198.251.84.200 and block this IP at the firewall level to prevent accidental access.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2023-10-14 12:06:05
- Registrar: Global Domain Group LLC
- IP: 198.251.84.200

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["OISD"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/e4a0ea04-29d8-40b9-abae-cfdaeb5a120a
- PhishDestroy: https://phishdestroy.io/domain/i-wholesaler.com/
- LLM endpoint: https://phishdestroy.io/domain/i-wholesaler.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/i-wholesaler.com/
Last updated: 2026-03-23