walletston[.]com

Analysis indicates that the domain walletston.com was registered on February 21, 2026 and is presently taken offline. The site’s page title is “walletston”, providing no direct reference to the target brand, yet intelligence flags the domain as an impersonation of the cryptocurrency exchange Bitget. The domain appears on four independent security blocklists, specifically PhishDestroy, Polkadot, Enkrypt, and Codeesura, confirming that multiple anti‑phishing feeds have identified it as malicious. VirusTotal scans show that 11 of 93 security vendors have flagged the domain, reinforcing the suspicion of malicious activity. The SSL certificate presented is identified as “WE1”, which does not correspond to a trusted certificate authority, further weakening the site’s legitimacy.

Network resolution points to the IPv6 address 2606:4700:3037::6815:5f94, which is owned by Cloudflare, Inc. (AS13335) and is geolocated in the United States. Although Cloudflare provides generic hosting services, the association does not mitigate the risk posed by the domain because the malicious content is hosted on the service’s edge network. Gridinsoft assigns a trust score of 0 out of 100, indicating an extreme lack of confidence in the domain’s safety. The combination of blocklist listings, vendor detections, low trust score, and the specific claim of Bitget impersonation classifies walletston.com as a high‑risk crypto‑scam infrastructure.

Uncertainties remain regarding the exact payload delivered to victims, as the page content has not been captured and the site is offline. Defenders should therefore block or sinkhole the domain at the DNS level, monitor outbound connections to the associated Cloudflare IP for any residual traffic, and incorporate the domain hash into endpoint detection rules. Continuous observation of the listed blocklists is advisable to capture any re‑activation attempts.