hardware-wallet-vergleich[.]de

This domain, hardware-wallet-vergleich.de, was registered on 26 April 2026 and resolves to the IPv4 address 85.13.156.134, which is geolocated to Germany and associated with Neue Medien Muennich GmbH. The hosting server runs Apache HTTP Server with a valid Let’s Encrypt R13 certificate, and serves HTTP 200 responses for the index page. The web application is built on a WordPress stack, identified by the presence of MySQL, PHP, Bootstrap, Yoast SEO, Select2, and Lightbox components. Automated analysis gave the site a Gridinsoft trust score of 0 out of 100, and it appears on a single security blocklist. The domain is also referenced in one AlienVault OTX pulse. No detections were recorded on VirusTotal at the time of analysis. Threat intelligence classifies the site as a crypto‑drainer, and the page title “Hardware Wallet Test 2020 ▷Top 5 im Test ▷Beratung + Vergleich” suggests it is masquerading as a legitimate hardware‑wallet comparison resource. Such a presentation is commonly used to lure cryptocurrency users into providing wallet addresses or private keys, potentially enabling unauthorized transfers. Current evidence does not reveal the specific payload or form used to capture credentials, nor does it show any malicious binaries hosted on the server. The lack of VirusTotal detections does not imply safety, as the site may rely on social engineering rather than executable malware. Further investigation is required to determine the exact data‑collection mechanisms and any downstream command‑and‑control infrastructure. Defenders should block resolution of hardware-wallet-vergleich.de at network perimeter, monitor DNS queries for the associated IP address, and inspect outbound traffic from internal hosts for unusual cryptocurrency‑related requests. Incident response teams are advised to capture any user submissions to the site for forensic analysis and to educate users about the risk of entering wallet credentials on untrusted comparison pages.