infinitycoinwallet[.]com

This domain is flagged as a crypto-drainer, designed to impersonate legitimate cryptocurrency wallet services and execute unauthorized transactions from victims' connected wallets. Analysis indicates the infrastructure is engineered to intercept wallet connections, drain funds, and exfiltrate assets without user consent. The threat primarily targets users who interact with the domain under the false pretense of managing digital assets, leading to immediate financial loss upon connection. Infrastructure analysis reveals the domain was registered on June 08, 2026, through Name.com, Inc., and currently resolves to the IP address 195.5.171.242. It is detected by 5 out of 95 security vendors on VirusTotal and appears on 3 distinct security blocklists. The domain is also referenced in 4 threat intelligence pulses on AlienVault OTX, further corroborating its malicious classification. The SSL certificate, issued by Let's Encrypt, does not mitigate the risk, as the domain remains a confirmed vector for crypto-draining attacks. Users who visited infinitycoinwallet.com or connected a wallet to the site should immediately revoke all active sessions and permissions granted to unknown or suspicious domains. It is critical to audit wallet transaction histories for unauthorized transfers and transfer remaining assets to a new, secure wallet address. Additionally, affected users should monitor connected accounts for signs of compromise and report the domain to relevant security platforms for further mitigation.