drainer.nexprofits.com
Category: Suspicious
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Detailed link, domain and iframe URLs from this site are not shown here - some of the strings contain content that isn't appropriate for general-audience display. The counts above reflect the full scan.
Description of drainer.nexprofits.com
This website appears to present itself as a cryptocurrency compliance or wallet-screening service under the name "AMLBot." Based on the page title, branding, and homepage text, it claims to help users check whether crypto wallets or transactions are linked to illicit funds, scams, or stolen assets. The content is framed around risk reduction, compliance, and wallet verification for cryptocurrency users.
However, the scanned domain is drainer.nexprofits.com rather than a primary brand domain matching the displayed service name. The subdomain label "drainer" is unusual in this context and may raise questions about the legitimacy or intended purpose of the page. The site appears to use third-party assets related to crypto wallets and blockchain libraries, which is consistent with a web-based cryptocurrency tool, but the available data does not clearly establish who operates it or whether it is officially connected to the brand shown on the page.
Safety Assessment for drainer.nexprofits.com
Scan results indicate mixed but concerning signals at the time of this scan. The domain was flagged by 4 out of 91 security engines, with multiple engines classifying it as phishing or suspicious. In addition, web-classification data associates the site with phishing and fraud-related categories. While blacklist checks and the malware scan did not detect malicious files or blacklist listings at the time of review, those clean results do not fully offset the phishing-related detections.
The domain is also very new, with an age of only 82 days, and it is not ranked among widely visited sites. The page presents itself as "AMLBot," but it is hosted on a different subdomain under nexprofits.com, which may indicate branding inconsistency and could increase the risk of impersonation or deceptive presentation. The subdomain name itself closely aligns with terminology commonly associated with crypto theft, which further adds to the concern.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate, which means traffic appears to be encrypted in transit. It is hosted on a LiteSpeed web server at IP address 192.227.159.251, with hosting attributed to HostPapa in Buffalo, United States. The domain uses nameservers under infracloudh.in, and DNSSEC is not enabled, so DNS responses do not appear to have additional authenticity protection.
From a technical scanning perspective, no malicious files were detected in the limited file scan, and no flagged external links or iframes were reported at the time of analysis. Even so, the combination of a newly registered domain, unsigned DNSSEC status, and phishing-related detections from multiple security engines suggests elevated caution may be warranted.
Share your experience with this website. Was it safe? Did you encounter any issues?