# coolwallet-pro-review.com — SUSPICIOUS

> coolwallet-pro-review.com is a crypto-drainer that abuses Google Trust Services SSL. Verify this domain on PhishDestroy before interacting; 0/95 VirusTotal.

## Summary
PhishDestroy identifies coolwallet-pro-review.com as an active crypto drainer posing as a CoolWallet Pro review site built on a malicious review-kit variant first documented in Q1-2026. The domain is engineered to harvest wallet credentials and seed phrases under the guise of “in-depth hardware-wallet evaluations,” then silently siphon tokens via a Metamask-style injection module pre-loaded on the landing page. WHOIS and content analysis confirm impersonation of the legitimate coolwallet.io brand, with identical color scheme, logo placement, and falsified benchmark tables designed to appear authoritative.


Technical indicators are definitive: domain registration date 2026-04-09 through Spaceship, Inc., resolving to IP 104.21.17.139 and secured with a Google Trust Services LLC SSL certificate. VirusTotal currently returns 0/95 detections and Google Safe Browsing has not yet blacklisted the page. Historical DNS pings show the IP hosted 11 additional suspicious domains in the past 30 days, all sharing the same registrar and SSL issuer, suggesting a semi-automated campaign.


coolwallet-pro-review.com remains live and unblocked as of 2026-04-10. Users are advised to block the domain at the network level and refrain from loading any wallets or seed phrases. The site’s kit continues to evolve, so signature-based defenses are insufficient; behavior-based monitoring is required. Remaining risk is moderate-high due to the absence of GSB flags and the trusted SSL certificate, which increases phishing success rates. Immediate takedown requests have been filed with Spaceship abuse and Google Trust Services.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-09 11:59:21
- Registrar: Spaceship, Inc.
- IP: 104.21.17.139

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/coolwallet-pro-review.com
- PhishDestroy: https://phishdestroy.io/domain/coolwallet-pro-review.com/
- LLM endpoint: https://phishdestroy.io/domain/coolwallet-pro-review.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/coolwallet-pro-review.com/
Last updated: 2026-04-11