wantedwalrus[.]com

This domain, wantedwalrus.com, was registered on December 31, 2024 through GoDaddy.com, LLC and uses the authoritative name servers ns57.domaincontrol.com and ns58.domaincontrol.com. DNS resolution points to the Cloudflare edge address 23.227.38.32, which belongs to ASN 13335 and is geolocated in Canada. The site presents a valid TLS certificate issued by Google Trust Services under the WE1 identifier, and HTTP responses indicate a permanent redirect (301) to the same host. Infrastructure analysis shows the presence of a Shopify e‑commerce backend, Klaviyo marketing integration, InstantGeo geolocation services, HSTS enforcement, a Facebook Pixel, and support for HTTP/3, all delivered via Cloudflare’s network. The domain’s Gridinsoft trust score is 0 out of 100, indicating a lack of reputation. VirusTotal has logged detections from two of ninety‑five security scanners, and the domain appears on a single blocklist operated by PhishDestroy. The page title returned by the server is “Wanted Walrus”, and the campaign is classified as a brand‑impersonation operation targeting the brand “blast”. The risk rating is high and the status remains active. Analysis indicates that the combination of a reputable TLS certificate, modern web technologies, and reputable hosting obscures the malicious intent, while the low trust score and limited detections suggest a recent or low‑profile deployment. No additional malicious payloads, credential‑harvesting forms, or redirect chains have been observed in the limited data set. Defenders should block or monitor DNS queries for wantedwalrus.com, enforce TLS inspection to reveal any hidden content, and add the domain to URL filtering lists. Continuous re‑assessment is recommended, as additional detections or changes in hosting may emerge.