wlficlaime[.]digital

The domain wlficlaime.digital has been confirmed as a high-risk crypto drainer. The site does not appear to be associated with any specific brand, but it has been linked to a drainer kit that targets cryptocurrency wallets and exchanges. This type of threat is designed to siphon off funds from unsuspecting users by exploiting vulnerabilities in their browsers or by using social engineering techniques to trick users into revealing their private keys or other sensitive information.

Technical analysis reveals that the domain has a VirusTotal score of 15/95, indicating that 15 out of 95 security vendors have flagged it as potentially malicious. The domain is registered with a registrar that is not explicitly named but is known to be associated with the SSL certificate WE1. The IP address 104.21.76.46, which the domain resolves to, is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain was created on February 21, 2026, and appears on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. Additionally, the domain is currently listed in Google Safe Browsing (GSB) as a high-risk site.

As of the latest assessment, the domain wlficlaime.digital is offline. Despite this, the infrastructure and historical data indicate a significant risk. Response actions have included blocking the domain on multiple security platforms to prevent further access and potential harm. However, users who may have interacted with the site while it was active are advised to monitor their cryptocurrency accounts for any unauthorized transactions and to change their passwords and private keys immediately. The remaining risk is high, as the threat actors could potentially re-register the domain or use similar infrastructure to launch new attacks.