MALICIOUS — CRITICAL
Phishing- und Sicherheitsprüfung für hardwarewalletratings.com
hardwarewalletratings[.]
The domain hardwarewalletratings.com is identified as a crypto drainer infrastructure.
- VirusTotal
- 5/91
- Blocklists
- No stored match
- Verfügbarkeit
- Letzter bekanntermaßen aktiv · HTTP 301
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@reg.ru.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
hardwarewalletratings.com — Letzter bekanntermaßen aktiv (HTTP 301). Betrugstyp: Wallet/seed Phishing. Zusammenfassung der Beweislage: VirusTotal 5/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); PhishDestroy score 80/100. Registrar: Registrar of Domain Na….
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Evidence Analysis
The domain hardwarewalletratings.com is identified as a crypto drainer infrastructure. It masquerades as a legitimate site offering hardware wallet reviews and ratings, potentially targeting users seeking information on cryptocurrency storage solutions. The specific threat category is crypto drainer, which involves the unauthorized extraction of cryptocurrency from victims' wallets, often through malicious scripts or compromised software.
Analysis indicates that hardwarewalletratings.com has been flagged by 5 out of 95 security vendors on VirusTotal, suggesting a relatively contained but significant threat. The domain was registered through Registrar of Domain Names REG.RU LLC and resolves to the IP address 172.67.153.106. It was created on March 25, 2026, and currently holds a Gridinsoft trust score of 0/100, indicating a complete lack of trustworthiness. The site is also listed in one threat intelligence pulse on AlienVault OTX, further corroborating its malicious intent. The SSL certificate for the domain is issued by Google Trust Services, which might have been used to lend a false sense of security to potential victims.
As of the latest assessment, hardwarewalletratings.com is taken offline, which may indicate a response from security teams or a temporary cessation of malicious activities. However, the domain is still blocked by PhishDestroy, a security service that monitors and blocks phishing sites. Despite the current offline status, the elevated risk level suggests that the infrastructure could be reactivated or repurposed. Users are advised to avoid any links or references to this domain and to regularly monitor their cryptocurrency accounts for unauthorized transactions. Security teams should maintain vigilance and continue to track the domain for any signs of re-emerging threats.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Datenabdeckung12 recorded checks
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
Gespeicherte Aufnahme
Domain-Intelligenz
Technische DetailsDNS, SSL-SANs, Zeitstempel
ICANN OVERSIGHT
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Forensische Erkenntnisse
Technologien · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100 % KonfidenzCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100 % KonfidenzHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100 % KonfidenzVirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of hardwarewalletratings.com · checked Jun 26, 2026
Nachweise und externe BerichteIndependent lookups and source reports
PD-20260325-1A0931 Recipient: abuse@reg.ru Victim safety and official reportingImmediate actions and verified reporting channels
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.