# wallnetrix.site — SUSPICIOUS > PhishDestroy warns: wallnetrix.site is an active crypto-draining scam, flagged by 3 of 95 VirusTotal vendors. Verify URLs before clicking! ## Summary PhishDestroy identifies wallnetrix.site (domain created March 11, 2026) as an active crypto-draining phishing domain designed to steal cryptocurrency wallet credentials and drain digital assets at the point of transaction. This domain is flagged by 3 of 95 VirusTotal security vendors, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolving to IP 172.67.196.227. It appears on 1 security blocklist and carries low trust scores with blocking action by MetaMask. The domain utilizes a Let's Encrypt SSL certificate to appear legitimate. Users are advised to immediately cease all interactions with wallnetrix.site and verify any similar URLs using PhishDestroy’s scanning tool. Organizations should add this domain to network blocklists and educate users about crypto-drainer red flags, including unexpected wallet connection prompts and unfamiliar domain names. The elevated risk level warrants heightened vigilance, especially in cryptocurrency and Web3 contexts. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registered: 2026-03-11 08:46:49 - Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED - IP: 172.67.196.227 ## Detection Status - VirusTotal: 3 vendors flagged - Google Safe Browsing: clean - Blocklists: 1 hits Lists: ["MetaMask"] ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/7c6eaa79-9048-4b8f-b188-7ed6d0baae31 - PhishDestroy: https://phishdestroy.io/domain/wallnetrix.site/ - LLM endpoint: https://phishdestroy.io/domain/wallnetrix.site/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/wallnetrix.site/ Last updated: 2026-03-23