wallet[.]aiusm[.]pro

The domain wallet.aiusm.pro is identified as a crypto drainer, a specialized threat designed to siphon cryptocurrency assets from victim wallets through deceptive transaction prompts or malicious smart contract interactions. As of the latest verification, the domain has been taken offline, displaying a takedown notice with the title 'Website Takedown Notice - Lovable Trust & Safety.' No active malicious payloads or live phishing pages are currently served from this address. Analysis indicates the domain was registered on April 09, 2026, through NameCheap, Inc., a registrar frequently observed in malicious infrastructure deployments. It resolved to the IP address 185.158.133.1, a host with prior associations to fraudulent schemes. Security vendors flagged wallet.aiusm.pro in 3 of 95 VirusTotal scans, while Gridinsoft assigned a trust score of 0 out of 100, reinforcing its classification as high-risk. The domain appears on one security blocklist, and its SSL certificate was issued by Let’s Encrypt, a common choice for threat actors due to its accessibility and short-lived validity periods. Current status confirms the domain is offline, mitigating immediate risk to end users. However, infrastructure analysis reveals patterns consistent with crypto drainer operations, including the use of bulletproof hosting and disposable certificates. Organizations and individuals are advised to block the domain and associated IP at the network perimeter, revoke any wallet permissions granted to unknown or suspicious contracts, and monitor transaction histories for unauthorized transfers. Security teams should treat domains registered through NameCheap with similar creation timelines and hosting characteristics as potential threats pending further validation.