cardanowallet[.]pro

This domain, cardanowallet.pro, has been identified as a crypto drainer, a type of phishing threat that aims to steal cryptocurrency from users. Analysis indicates that the domain is designed to mimic legitimate Cardano wallet services, thereby tricking unsuspecting users into providing sensitive information, such as private keys and login credentials, which can lead to the unauthorized transfer of funds.

The domain was created on February 21, 2026, and is registered through Name.com, Inc. Infrastructure analysis reveals that it resolves to the IP address 185.158.133.1, which is located in Poland and associated with Cloudflare, Inc. (AS13335). On VirusTotal, 14 out of 95 security vendors have flagged this domain as malicious. Additionally, it appears on one security blocklist and has been identified as a phishing site by Google Safe Browsing. The SSL certificate is issued by Google Trust Services / WE1, which may give a false sense of security to users.

If users have visited cardanowallet.pro, they are advised to immediately check their Cardano wallet for any unauthorized transactions and change their passwords and private keys. Users should also monitor their transaction history and account activity for any suspicious activity. It is recommended to report the incident to the official Cardano support channels and consider using multi-factor authentication (MFA) to enhance security. Additionally, users should avoid clicking on links from untrusted sources and verify the URL of any website they visit to ensure it is legitimate.