hardwarewalletratings[.]com

The domain hardwarewalletratings.com is identified as a crypto drainer infrastructure. It masquerades as a legitimate site offering hardware wallet reviews and ratings, potentially targeting users seeking information on cryptocurrency storage solutions. The specific threat category is crypto drainer, which involves the unauthorized extraction of cryptocurrency from victims' wallets, often through malicious scripts or compromised software.

Analysis indicates that hardwarewalletratings.com has been flagged by 5 out of 95 security vendors on VirusTotal, suggesting a relatively contained but significant threat. The domain was registered through Registrar of Domain Names REG.RU LLC and resolves to the IP address 172.67.153.106. It was created on March 25, 2026, and currently holds a Gridinsoft trust score of 0/100, indicating a complete lack of trustworthiness. The site is also listed in one threat intelligence pulse on AlienVault OTX, further corroborating its malicious intent. The SSL certificate for the domain is issued by Google Trust Services, which might have been used to lend a false sense of security to potential victims.

As of the latest assessment, hardwarewalletratings.com is taken offline, which may indicate a response from security teams or a temporary cessation of malicious activities. However, the domain is still blocked by PhishDestroy, a security service that monitors and blocks phishing sites. Despite the current offline status, the elevated risk level suggests that the infrastructure could be reactivated or repurposed. Users are advised to avoid any links or references to this domain and to regularly monitor their cryptocurrency accounts for unauthorized transactions. Security teams should maintain vigilance and continue to track the domain for any signs of re-emerging threats.