galajxydigeitaseercyptosg[.]com

This domain, galajxydigeitaseercyptosg.com, was identified as a crypto wallet drainer phishing site targeting users through fraudulent cryptocurrency trading interfaces. The page title, Cointrade, suggests an attempt to impersonate legitimate cryptocurrency exchange platforms. As of the latest assessment, the domain has been taken offline, though prior activity indicates a high-risk threat vector aimed at stealing wallet credentials and draining funds. Analysis indicates the domain was registered on March 22, 2026, through Dynadot Inc, and resolved to the IP address 188.114.96.3. It was flagged by 15 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain appeared on four security blocklists and was blocked by multiple threat intelligence feeds, including MetaMask and PhishDestroy. Detected technologies include HSTS, Cloudflare, and HTTP/3, which may have been leveraged to obfuscate malicious activity. Google Safe Browsing classified the domain under SOCIAL_ENGINEERING, reinforcing its phishing classification. The domain’s current offline status reduces immediate risk, but historical data suggests it was part of a broader phishing campaign. Organizations and users are advised to block the domain and associated IP at the network level, monitor for residual DNS queries, and review logs for prior connections. End-users should verify cryptocurrency exchange URLs directly through official sources and enable multi-factor authentication on all wallet and exchange accounts. Security teams should treat any prior interaction with this domain as a potential compromise and conduct forensic analysis on affected systems.