crypto-cardwallet[.]com

This domain, www.crypto-cardwallet.com, is flagged as an active crypto drainer designed to siphon cryptocurrency assets by deceiving users into connecting their wallets. The threat type is classified as a crypto_drainer, with no direct brand impersonation identified at this stage. The domain remains operational, posing a risk to users who may interact with it under false pretenses. Analysis indicates the domain was registered on June 17, 2026, through Name.com, Inc., and resolves to the IP address 216.150.1.1, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509). The SSL certificate is issued by Let's Encrypt (YR1), a common choice for both legitimate and malicious domains. Despite its recent creation, the domain has not been flagged by any of the 95 vendors on VirusTotal, though it appears on one security blocklist and is actively blocked by PhishDestroy. The page title, 'Smart Crypto Card,' suggests an attempt to mimic legitimate crypto wallet services. Current infrastructure and behavioral indicators suggest this domain is part of an ongoing campaign to exploit users seeking crypto-related services. Users and organizations are advised to block access to 216.150.1.1 and monitor for connections to www.crypto-cardwallet.com. Network-level protections should be implemented to prevent interactions with the domain, and wallet software should be configured to reject connections from untrusted sources. Further monitoring of associated IPs and certificates is recommended to identify related threats.