aml-walletverify[.]com

This domain, aml-walletverify.com, is identified as a crypto drainer designed to execute unauthorized transactions from connected cryptocurrency wallets. Victims are typically lured through deceptive prompts claiming wallet verification or security updates, which, when interacted with, trigger malicious scripts that drain funds without consent. The threat targets users of decentralized finance platforms and self-custody wallets, exploiting trust in security-related workflows to bypass user vigilance. Analysis indicates the domain was registered on April 02, 2026, through Ultahost, Inc., and currently resolves to the IP address 15.197.129.158. Security vendors on VirusTotal flagged this domain with 4 detections out of 95, while Gridinsoft assigned a trust score of 0/100. The domain appears on one security blocklist and is currently offline, though its infrastructure may remain a latent risk for future campaigns. The creation date suggests an attempt to exploit emerging trends in regulatory compliance narratives, such as Anti-Money Laundering (AML) checks, to lend credibility to the scam. If you visited aml-walletverify.com or interacted with its content, immediately disconnect any connected wallets from the internet and revoke all active smart contract approvals using a trusted blockchain explorer. Scan the device used for access with updated security tools to detect potential malware or unauthorized scripts. Monitor wallet activity for unauthorized transactions and report any anomalies to the platform or service provider. Users should also reset credentials for any accounts accessed during the interaction and enable multi-factor authentication where available. Avoid reusing passwords or recovery phrases across platforms to mitigate secondary exposure risks.