mywallet-help[.]com

The domain mywallet-help.com has been identified as a crypto_drainer, specifically targeting users by impersonating the Keplr Wallet platform. This domain is currently offline, but prior analysis confirms its association with malicious activity designed to drain cryptocurrency assets from victims. The threat type, classified as a crypto_drainer, indicates a focus on unauthorized fund transfers from compromised wallets. Analysis of the domain reveals it was registered on February 21, 2026, through NiceNIC International Group Co., Limited. Infrastructure analysis indicates the domain resolves to the IP address 188.114.96.3 and employs Cloudflare alongside HTTP/3 technologies. Detection metrics show that 6 of 95 security vendors on VirusTotal flagged the domain as malicious. Additionally, the domain appears on three security blocklists and has been actively blocked by multiple wallet security protocols. The Gridinsoft trust score for this domain is 0 out of 100, further corroborating its malicious nature. The page title, 'Keplr Wallet | Your Multichain Gateway,' explicitly mimics the branding of the legitimate Keplr Wallet service. As of the latest assessment, mywallet-help.com has been taken offline, reducing immediate exposure risk. However, the infrastructure and registration details suggest potential for re-emergence under similar or altered domains. Users are advised to verify wallet addresses through official channels before executing transactions and to monitor for unauthorized access to their cryptocurrency wallets. Organizations should update blocklists to include this domain and its associated IP address, while security teams are encouraged to review logs for any prior interactions with 188.114.96.3 or related domains registered through NiceNIC International Group Co., Limited.