adm-swap[.]outwallet[.]world

This domain, adm-swap.outwallet.world, is identified as a crypto drainer infrastructure designed to siphon cryptocurrency assets from victims by mimicking legitimate wallet or admin interfaces. Analysis indicates the site employs deceptive prompts to trick users into authorizing malicious transactions, which then drain funds from connected wallets without consent. The threat specifically targets users interacting with decentralized finance (DeFi) platforms or crypto wallet services, leveraging social engineering to bypass security measures such as multi-factor authentication or transaction confirmation prompts.

Evidence supporting this assessment includes detection by 16 out of 95 security vendors on VirusTotal, indicating a consensus among threat intelligence providers regarding its malicious nature. The domain was registered on April 10, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the domain resolves to the IP address 188.114.96.3 and is currently listed on one security blocklist. The SSL certificate, issued by Google Trust Services, does not mitigate the risk, as phishing domains commonly use valid certificates to appear legitimate. The page title "Admin" further suggests an attempt to impersonate backend or administrative interfaces to deceive technically proficient users.

Users who have interacted with adm-swap.outwallet.world should immediately revoke any wallet authorizations granted to the domain via their wallet settings or connected dApp interfaces. It is critical to audit all recent transactions for unauthorized activity, particularly those involving token approvals or fund transfers. If funds were lost, report the incident to relevant blockchain explorers and law enforcement agencies with jurisdiction over cybercrime. Additionally, monitor connected accounts for signs of compromise, such as unexpected login attempts or changes to security settings. To prevent future exposure, verify domain authenticity before interacting with any crypto-related service, and employ hardware wallets or isolated environments for high-value transactions.