hop[.]exchange-connect-web-wallets[.]app

The domain hop.exchange-connect-web-wallets.app was registered on February 21, 2026 and is currently listed as offline. Infrastructure analysis shows it resolves to IP address 104.21.64.1, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The SSL certificate attached to the site is identified as WE1, indicating the use of a standard TLS certificate without further validation details. Reputation services provide a Gridinsoft trust score of 0 out of 100, reflecting an extremely low confidence rating.

VirusTotal reports a single detection out of 93 scanning engines, confirming that at least one security vendor has flagged the domain as malicious. The domain appears on one public security blocklist and has been actively blocked by the PhishDestroy mitigation service. The page title returned by the server matches the domain name exactly, and the supplied intelligence classifies the activity as a Crypto Scam with a specific focus on draining cryptocurrency assets.

No additional context such as observed phishing pages, credential harvesting forms, or malware payloads is available from the provided data. Defenders should continue to enforce blocks on the domain across DNS filtering, web proxy, and endpoint protection solutions, and monitor for any re‑hosting attempts that may use the same IP range or certificate fingerprint. Given the low trust score, confirmed detection, and classification as a crypto drainer, the domain should be treated as high‑risk and incorporated into threat‑intel feeds for proactive detection.