waitlist-opsec[.]com

This domain, waitlist-opsec.com, poses a high-risk brand impersonation threat targeting users of a widely recognized cryptocurrency wallet service. The site mimics a legitimate waitlist or sign-up page, presenting itself under the title 'Waitlist.' Its primary objective is to deceive visitors into submitting sensitive credentials, such as wallet recovery phrases, private keys, or login details, which could lead to unauthorized access and financial loss. The use of a seemingly official waitlist format increases the likelihood of successful social engineering, particularly among users expecting exclusive access or updates from the targeted service. Analysis indicates this domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with malicious infrastructure. It is flagged by 14 out of 95 security vendors on VirusTotal, and appears on three independent security blocklists. The domain resolves to the IP address 172.67.199.197, which is part of a content delivery network known for hosting both legitimate and malicious content. Technical indicators include the use of HSTS, Cloudflare, and HTTP/3, suggesting an attempt to appear legitimate and evade detection through modern web protocols. A Gridinsoft trust score of 0/100 further corroborates its malicious classification. Users who have visited waitlist-opsec.com or interacted with its content should immediately cease all engagement and take corrective actions. If any credentials or sensitive information were entered, revoke access to associated accounts and initiate recovery procedures through official channels. Monitor linked accounts for unauthorized transactions and enable multi-factor authentication where available. Additionally, clear browser cache and cookies to remove any persistent tracking elements. Report the domain to relevant security teams or abuse contacts to aid in takedown efforts and prevent further victimization.