walletsservices[.]com

The domain walletsservices.com was registered on April 15, 2026 through DropCatch.com 848 LLC. It resolves to the IPv4 address 54.165.131.183, an Amazon Web Services EC2 instance in the US (us-east-1). The domain’s Gridinsoft trust score is 0/100 and it appears on three security blocklists. VirusTotal analysis shows 3 of 95 scanners flag the domain as malicious. The hosting IP is associated with a standard AWS EC2 node and does not reveal additional services beyond a web server that returns HTTP 200. The site presents a valid TLS certificate signed by GoDaddy TLS Intermediate CA DV - R1v1, indicating a publicly trusted certificate but offering no indication of legitimate purpose. Nameservers are ns1.namebrightdns.com and ns2.namebrightdns.com. Threat intelligence categorizes walletsservices.com as a crypto_drainer, a high‑risk indicator for attempts to illicitly capture cryptocurrency credentials or redirect transaction flows. The domain has been referenced in one AlienVault OTX pulse and is currently blocked by multiple phishing mitigation lists. The low Gridinsoft score and the presence on three blocklists corroborate a malicious intent. Defenders should block network resolution to 54.165.131.183 and enforce URL filtering for walletsservices.com across all egress points. Incident response teams should monitor for any wallet‑related authentication attempts that reference this domain and consider revoking compromised credentials. Continuous re‑evaluation of the domain’s status is advised, as the active flag indicates ongoing operation.