defilama-wallett[.]typedream[.]app

The domain defilama-wallett.typedream.app was created on January 22, 2021 and is registered through Squarespace Domains II LLC. Infrastructure analysis shows the domain resolves to 172.67.206.36, an address owned by AS13335 Cloudflare, Inc. and located in the United States. DNS is served by the Cloudflare nameservers annalise.ns.cloudflare.com and darwin.ns.cloudflare.com, and the site presented a Google Trust Services / WE1 SSL certificate, indicating the use of a public certificate issued by Google. HTTP probing returned a 404 status code, and the page title captured during the scan reads "DefiLlama Wallet: DefiLlama Wallet Find, Claim & Earn Free Crypto," which aligns with the reported scam type of a crypto drainer.

Google Safe Browsing flags the domain for social engineering, and Scamadviser assigns a trust score of 1 / 100, reinforcing the malicious characterization. VirusTotal records indicate that ten of ninety‑five scanned security vendors flagged the domain, and the site appears on one external blocklist. The phishing kit associated with the domain is identified as a Giveaway Scam, and the domain has been added to the PhishDestroy blocklist.

Although the current status is offline, the combination of low trust scores, multiple vendor detections, and explicit malicious labeling suggests a high‑risk profile. Defenders should proactively block the domain at the DNS and proxy layers, continue to monitor the IP address for any reactivation, and consider adding the host to internal threat intelligence feeds. Ongoing vigilance is advised because the offline state may be temporary and the underlying infrastructure—Cloudflare‑hosted services and a publicly trusted SSL certificate—can be rapidly repurposed for further crypto‑draining campaigns.