securewalletrecover[.]com
Phishing and security check for securewalletrecover.com
“SecureWalletRecover | Professional Crypto Wallet Recovery Service”
securewalletrecover.com entered the PhishDestroy evidence set on Jan 24, 2026. The stored content classification is crypto scam. The assembled evidence scores 86/100 (high).
Two independent sources are positive: VirusTotal and Spamhaus DBL. VirusTotal recorded 7 detections among 91 engines: alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, Fortinet, G-Data, Gridinsoft on Jul 26, 2026 at 03:22 UTC. Spamhaus DBL: DBL_PHISH on Jul 14, 2026 at 10:37 UTC. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. URLQuery recorded no positive detection on Jan 25, 2026 at 04:52 UTC. Google Safe Browsing returned no flag on Mar 2, 2026 at 20:35 UTC. URLScan completed without a malicious verdict (score 0) on Jan 24, 2026 at 19:17 UTC.
HTTP 200 was recorded on Aug 7, 2026 at 10:31 UTC. Registration records for the domain list Dynadot LLC as the registrar. At collection time, the hostname resolved to 172.67.154.39 on AS13335 (Cloudflare, Inc.). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. The stored server header is cloudflare. Captured page title: “SecureWalletRecover | Professional Crypto Wallet Recovery Service”. DOM analysis completed on Jul 10, 2026 at 18:21 UTC; stored DOM score 0/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction completed on Jul 29, 2026 at 02:38 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists WE1 as the certificate issuer with validity through May 1, 2026; checked Mar 15, 2026 at 05:39 UTC.
No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. The 0/100 DOM score means that the DOM pass stored no scored indicators; it does not negate the independent source findings. Taken together, the page content and independent findings support classifying this hostname as crypto scam.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
ICANN Got Paid. Accountability Did Not Arrive.
For this gTLD, the registrar above operates under an ICANN contract. ICANN collects annual, variable and transaction-based fees tied to registrations, renewals and transfers.
Accreditation: monetized. Accountability: please check back later.
Then the magic starts: ICANN writes RAA §3.18, the registrar investigates abuse inside its own customer base, and victims deliver the evidence for free while every layer waits for someone else to act. If that makes victims feel safer, excellent—the invoice worked.
Technologies · 2 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal Analysis
Archived Evidence
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of securewalletrecover.com · checked Mar 2, 2026
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive