wallet-meta[.]com

Analysis conducted on July 24, 2026 identifies wallet-meta.com as a high‑risk crypto drainer infrastructure. The domain was created on February 21, 2026 and is currently taken offline. DNS resolution points to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No TLS certificate is presented, indicating that the site operated without HTTPS encryption. The authoritative nameservers are dylan.ns.cloudflare.com and tia.ns.cloudflare.com, and the registration was performed through REALTIME REGISTER B.V., a registrar commonly observed in malicious registrations.

The page title returned by the server, “X Token - Official Presale”, aligns with the reported crypto‑scam profile. Threat intelligence sources list the domain in three public blocklists and in the PhishDestroy, MetaMask, and SEAL blocklists. AlienVault OTX references the domain in a single pulse, and VirusTotal records 13 of 93 scanning engines flagging the domain as malicious. Gridinsoft assigns a trust score of 0 out of 100, further confirming its malicious reputation.

While the site is presently offline, the observed infrastructure—Cloudflare hosting, lack of TLS, and registration details—suggests a disposable deployment typical of crypto‑drainer campaigns. No additional payload or content analysis is available, so the exact phishing flow remains unknown. Defenders should continue to block the domain at network perimeter, monitor DNS queries for the associated IP and nameservers, and add the domain to internal blacklists. Given the low trust score and multiple vendor detections, any future re‑appearance should be treated as malicious without further verification.