dexwallet[.]live

The domain dexwallet.live was registered on July 12, 2026 through Name.com, Inc. and is currently delegated to four name servers (ns1cny.name.com, ns2ckr.name.com, ns3jkl.name.com, ns4hny.name.com). DNS resolution points to the IPv4 address 34.111.179.208, which remains active as of the report date. The site presents a valid Let's Encrypt certificate (issuer YE1), indicating that TLS encryption is in place but providing no indication of malicious intent on its own. The domain is classified as a crypto‑drainer, suggesting it is being used to solicit cryptocurrency transfers under false pretenses. No additional content analysis or page‑level evidence has been published, so the specific tactics employed by the site are not yet known. Investigators should treat the domain as hostile: network defenders should add the hostname and its IP address to blocklists, monitor DNS queries for the associated name servers, and consider sinkholing traffic to mitigate potential victim exposure. Continuous observation of the domain’s activity and any emerging indicator of compromise is advised, as the threat remains under investigation and the infrastructure could be leveraged for further credential‑stealing or fund‑exfiltration campaigns.