wallet-verify[.]cc

The domain wallet-verify.cc was registered through GoDaddy.com, LLC on July 23 2026 and is currently resolved to the IPv4 address 216.24.57.1. The authoritative name servers are ns03.domaincontrol.com and ns04.domaincontrol.com, both belonging to GoDaddy's DNS infrastructure. Within three days of registration the domain appeared on three independent security blocklists and has been actively flagged by the phishing‑remediation services PhishDestroy, MetaMask, and SEAL, indicating that it is being used to target cryptocurrency users. VirusTotal scans show that four of ninety‑one antivirus and URL‑reputation engines have issued a detection against the domain, reinforcing the suspicion that it hosts malicious activity.

The specific threat category associated with the domain is a crypto drainer, a class of scam that typically lures victims into submitting private keys or signing transactions that transfer funds to attacker‑controlled wallets. No public evidence of the site’s page title, SSL certificate details, HTTP response codes, or Safe Browsing status is available in the current intelligence feed, leaving the exact delivery mechanism unverified. Nevertheless, the convergence of recent registration, rapid blocklisting, multiple vendor detections, and attribution to known crypto‑drainer mitigation services provides a high confidence indication of malicious intent.

Defenders should add wallet-verify.cc to outbound‑traffic deny lists, enforce DNS‑level filtering, and monitor for any attempts to resolve or contact the IP address 216.24.57.1. Organizations that handle cryptocurrency transactions should also educate users to reject unsolicited wallet‑verification requests and verify URLs through trusted channels. Ongoing telemetry collection is recommended to capture any future changes in hosting, SSL deployment, or content that could refine the threat profile.