multiwalletsmartchain[.]web[.]app

On July 23, 2026, the domain multiwalletsmartchain.web.app is flagged as a high-risk crypto drainer. The site is currently offline, returning a 404 HTTP status and displaying a 'Site Not Found' page title. Infrastructure analysis reveals that the domain is hosted on Firebase, a Google LLC service, and resolves to an IP address in the US (2620:0:890::100) under the AS54113 Fastly, Inc. network. The SSL certificate is issued by Google Trust Services, indicating a secure connection, although this does not necessarily imply safety.

The domain was created on February 21, 2026, which is a relatively recent registration, suggesting it may be a newly launched scam site. Google Safe Browsing has flagged the domain for social engineering, alerting users to potential phishing or scam activity. Further, the domain appears on two security blocklists, PhishDestroy and ScamSniffer, reinforcing its high-risk status. While 10 out of 93 security vendors on VirusTotal flag this domain, the exact nature and extent of the threat are still under investigation.

Defenders should remain vigilant and take steps to ensure that no users within their networks attempt to access this domain. Since the site is currently offline, it may be temporarily taken down or undergoing maintenance, but the risk remains. Security teams should block this domain at the network level and monitor for any reactivation or related malicious activity. The trust score for this domain is low, and users should be educated to avoid clicking on links or entering sensitive information on untrusted sites, especially those involving cryptocurrency transactions.