hermeswalletswiss[.]com

This domain, hermeswalletswiss.com, is identified as an active crypto drainer impersonating the Hermes wallet brand. Current intelligence confirms the threat is ongoing and under investigation by security teams. The infrastructure is actively resolving malicious activities targeting cryptocurrency users.

Analysis indicates the domain was registered on April 1, 2026, through TUCOWS.COM, CO. It resolves to the IP address 209.99.191.182, which has not been widely flagged at this time. VirusTotal currently reports 0 detections out of 95 vendor engines queried, suggesting this domain is not yet widely recognized as malicious. The newly registered domain status and lack of detections contribute to its elevated risk profile, as threat actors often exploit such blind spots to evade early detection mechanisms.

Given the domain's active status and its apparent role in draining cryptocurrency wallets under the guise of a legitimate service, immediate defensive actions are recommended. Security teams should block both the domain hermeswalletswiss.com and its resolved IP address 209.99.191.182 at the network perimeter. Additionally, endpoint monitoring should be enhanced to detect potential interactions with this domain, such as HTTP requests or DNS resolutions. Given its recent creation and low detection rate, proactively updating threat intelligence feeds with this indicator is critical to prevent further compromise.