manifest-trade[.]com

Analysis of the domain manifest-trade.com indicates active involvement in a high-risk phishing campaign targeting cryptocurrency wallet users. The domain was registered on July 18, 2026, through UnstoppableUS2 LLC, a registrar associated with decentralized domain services. Infrastructure analysis reveals the domain resolves to the IP address 186.2.175.103, though no autonomous system number (ASN) or geolocation data is currently available for further network attribution. The domain utilizes nameservers ns1.unstoppabledomains.com and ns2.unstoppabledomains.com, consistent with the registrar's infrastructure. Defensive telemetry shows the domain has been flagged by three independent security blocklists, including PhishDestroy, MetaMask, and SEAL, which specialize in cryptocurrency-related threats. Despite its recent registration, the domain remains active and has not yet been widely detected by commercial antivirus engines, as evidenced by the absence of detections in available scans. This lack of detection does not imply safety but rather highlights the domain's evasive characteristics during its early operational phase. The specific content hosted on manifest-trade.com has not been fully analyzed, though the presence of MetaMask and SEAL in the blocklist data suggests a likely focus on credential harvesting or wallet-draining tactics. Defenders are advised to treat this domain as malicious and implement blocking measures at the DNS and network layers. Organizations should monitor for connections to 186.2.175.103 and review logs for any interactions with the domain, particularly in environments where cryptocurrency transactions are conducted. Further investigation into the hosting provider and associated IP range may reveal additional related infrastructure.