wallapop[.]id57354480556[.]click

PhishDestroy has identified a phishing domain targeting Wallapop users: wallapop.id57354480556.click. This domain is part of a generic phishing campaign designed to steal login credentials or personal information from unsuspecting victims. The domain mimics the legitimate Wallapop platform, using a subdomain structure that includes 'wallapop' to appear authentic. No specific drainer kit was identified, but the threat remains significant due to the brand impersonation.

Technical analysis reveals that the domain was registered on April 2, 2026, through NameSilo, LLC, and resolves to IP address 172.67.197.185. VirusTotal shows 0 detections out of 95 scanners, meaning it was not flagged by security vendors during analysis. The domain currently has no SSL certificate, which is a red flag for users expecting secure connections. It appears on 1 security blocklist, indicating some recognition by threat intelligence feeds. Google Safe Browsing status was not explicitly provided, but the lack of SSL and blocklist presence suggests moderate risk.

As of the latest check, the domain is offline, likely taken down after being reported. PhishDestroy recommends that users who may have interacted with this domain change their Wallapop passwords immediately and enable two-factor authentication. Monitor accounts for suspicious activity and avoid clicking on links from unsolicited messages. While the immediate threat is neutralized, similar domains may appear, so vigilance is advised.