secure-extensn-coin-wallet[.]typedream[.]app

The domain secure-extensn-coin-wallet.typedream.app was registered through the Typedream website‑builder platform and currently resolves to the IPv4 address 188.114.96.10. No nameserver information is available, and the domain appears on three public security blocklists. It is explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services, indicating that these providers have identified it as a malicious resource. VirusTotal analysis shows that two of ninety‑one scanning engines flag the domain, confirming the presence of at least some suspicious characteristics.

The threat type is catalogued as a crypto drainer, suggesting that the site is intended to lure cryptocurrency users into disclosing private keys or signing transactions that would transfer funds to an attacker‑controlled wallet. No page title, SSL certificate details, or HTTP response codes have been disclosed, and the content of the landing page has not been publicly analyzed, leaving the exact visual impersonation unknown. Infrastructure analysis reveals that the hosting IP belongs to Typedream’s shared hosting environment, a pattern often leveraged by low‑cost phishing operators to obscure attribution.

The domain remains active as of the report date, August 06 2026, and continues to resolve to the same IP. Defenders should add the domain and its resolving IP to network deny lists, ensure that cryptocurrency wallet extensions such as MetaMask are configured to block known malicious URLs, and monitor the three blocklists for any updates. Continuous re‑scanning with multi‑engine services is advised to capture any emerging detections, and any observed attempts to interact with the domain should be logged and investigated for potential credential compromise.