sumsub-scanwallet[.]com

This domain is flagged as a potential crypto drainer. Crypto drainers are malicious entities that aim to siphon off cryptocurrency from unsuspecting users' wallets. By masquerading as legitimate services, such as those focusing on financial security and AML checks, they can deceive users into divulging sensitive wallet information. The presence of a misleading page title like "AML Check — Financial Security Matters" suggests an attempt at gaining user trust under false pretenses.

Analysis reveals that the domain sumsub-scanwallet.com is currently not flagged on VirusTotal, showing 0 detections out of 95. However, it is blocked by PhishDestroy, indicating recognized threat potential. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and has an SSL certificate issued by Google Trust Services / WE1. The domain resolves to IP 188.114.97.3, located in the United States under Cloudflare's network (AS13335). It's important to note that the domain creation date is a future date, June 13, 2026, which is an anomaly and often an indicator of suspicious activity.

If you have visited this domain or interacted with its content, it is crucial to take immediate precautions. Do not supply any personal or financial information on sites associated with this domain. Monitor your cryptocurrency wallets for unauthorized transactions and consider moving your assets to secure wallets. Stay informed by using up-to-date security tools and check the latest blocklists for any updates on this domain's status. Ensure your system's antivirus and anti-malware software are active and performing regular scans to detect any potential threats.