leapwallet[.]network

The domain leapwallet.network was registered on May 13, 2026 through NameSilo, LLC and currently resolves to the IPv4 address 38.132.122.144. Analytical feeds have placed the domain on three independent security blocklists, and it is actively blocked by PhishDestroy, MetaMask, and SEAL, indicating that multiple defensive platforms have observed malicious activity associated with the host. VirusTotal scans show that 13 of 91 security vendors have flagged the domain, reinforcing the suspicion that the infrastructure is being used for illicit purposes.

The threat classification supplied is a crypto drainer, a category that typically targets cryptocurrency wallets by attempting to harvest private keys or redirect transactions. No public page title, SSL certificate details, or HTTP response codes have been disclosed, so the exact content served by the site remains unverified. However, the convergence of recent domain creation, a dedicated IP address, blocklist presence, and multi‑vendor detections suggests a purpose‑built operation rather than an incidental compromise.

Defenders should add leapwallet.network to DNS and URL filtering policies, monitor outbound connections to 38.132.122.144, and consider extending threat‑intel feeds to include any newly observed subdomains or related IPs. Continuous re‑scanning of the domain with sandbox and endpoint tools is advised to capture any payloads that may be delivered in future interactions. Given the high risk rating and active status, organizations handling cryptocurrency assets should treat any communication from this domain as malicious and block it at the network perimeter.