multi-wallet[.]pro

PhishDestroy identifies multi-wallet.pro as an active crypto drainer posing elevated risks to cryptocurrency users. This domain leverages deceptive branding to trick visitors into connecting wallets or entering seed phrases, enabling unauthorized cryptocurrency transfers. Threat actors behind this campaign impersonate legitimate multi-wallet services to harvest private keys and drain digital assets. The domain was registered through HOSTINGER operations, UAB, on October 08, 2025, and resolves to IP 46.202.143.195 with a Let's Encrypt SSL certificate for added legitimacy. This domain was flagged by only 1 out of 95 security vendors on VirusTotal, highlighting the stealthy nature of crypto drainers. Hosted on infrastructure associated with Hostinger, a popular hosting provider, the domain’s recent creation date (October 08, 2025) suggests a short-lived campaign designed to evade detection. The low detection rate underscores the challenge users face in identifying such threats independently, as traditional security tools may overlook these sophisticated attacks. If you visited multi-wallet.pro, immediately disconnect your wallet and revoke any connected permissions in your wallet settings. Do not enter seed phrases or private keys. Run a malware scan on all devices used to access the domain, and monitor your wallets for unauthorized transactions. Report the domain to your antivirus provider and consider using hardware wallets or transaction simulators to detect drainer scripts before approval. Stay vigilant against copycat domains and verify URLs before entering sensitive information.