community-wallet[.]org

Community-wallet.org is an active domain registered through IONOS SE on February 21, 2026. The zone is served by four UI‑DNS name servers (ns1079.ui-dns.org, ns1095.ui-dns.de, ns1116.ui-dns.biz, ns1124.ui-dns.co). DNS resolution points to IP 217.160.0.234, which belongs to AS8560 operated by IONOS SE in Germany. No TLS certificate is presented; the site is reachable over HTTP with a 200 OK response. The page title returned by the server is “community-wallet.org/defaultsite”, and no further content analysis is available.

The domain is listed on three public security blocklists and has been flagged by the PhishDestroy, MetaMask, and SEAL blocklists. Gridinsoft assigns a trust score of 0 out of 100, indicating a high likelihood of malicious intent. VirusTotal scans show that 10 of 93 security vendors label the host as malicious. The site is classified as a crypto‑related scam and explicitly impersonates Microsoft, suggesting an attempt to lure victims into a cryptocurrency transaction under the guise of a Microsoft service. Evidence confirms the infrastructure, registration details, and detection history, but the exact payload or credential‑capture mechanism remains unknown because the page content has not been publicly disclosed.

Defenders should block the domain and its IP at perimeter firewalls, update DNS filtering policies, and add the associated IP range to threat‑intel feeds. Continuous monitoring of the four UI‑DNS name servers is advised, as they may be reused for additional malicious domains. Organizations using Microsoft services should educate users about unsolicited cryptocurrency requests and enforce multi‑factor authentication to mitigate potential credential theft. Incident response teams should treat any traffic to this host as malicious and collect relevant logs for further forensic analysis.