walletweb[.]top

The domain walletweb.top is a phishing site specifically designed as a crypto drainer, a type of scam that targets cryptocurrency wallet credentials to siphon funds without authorization. It does not impersonate any known brand or utilize a publicly identified drainer kit. As of the latest verification, walletweb.top has been taken offline, though it previously posed an elevated risk to users who may have interacted with it.

Technical analysis of walletweb.top reveals limited but notable detection. Only 2 of 95 security vendors on VirusTotal flagged the domain, including G-Data and Seclookup, while Google Safe Browsing did not issue any warnings. The domain was registered on October 08, 2025, through Gname.com Pte. Ltd. and resolved to the IP address 172.67.192.251, hosted on Cloudflare’s infrastructure (AS13335) in the US. It appeared on 2 security blocklists, PhishDestroy and ScamSniffer, and employed Cloudflare services with an SSL certificate issued by Google Trust Services (WE1). The observed page title was 'Crypto wallet,' and the site returned an HTTP 521 status at the time of assessment.

Users who may have connected a wallet to walletweb.top should immediately revoke all token approvals through a trusted blockchain explorer or wallet interface and transfer remaining funds to a new, secure wallet. No password changes are necessary unless credentials were also exposed. To report the domain, submit it to platforms like ScamSniffer, PhishDestroy, or the Anti-Phishing Working Group (APWG). Additionally, victims can file complaints with local cybercrime authorities or the FBI’s Internet Crime Complaint Center (IC3) if financial losses occurred.