whaleairdrops[.]virtulmart[.]shop

The domain whaleairdrops.virtulmart.shop is a phishing site that impersonates the brand Across. This site poses a significant risk as a seed phrase phishing scam, designed to trick users into revealing their cryptocurrency wallet seed phrases. The site has been taken offline, but users who may have interacted with it should take immediate steps to secure their assets and personal information.

The domain was detected by 1 of 95 vendors on VirusTotal, including Gridinsoft, and appears on 1 security blocklist, specifically PhishDestroy. It was created on February 21, 2026, and uses an SSL certificate issued by R12. The page title observed was 'Whale Airdrops 🐋 - LayerZero, Monad, Linea, Starknet, ZkSync Airdrops 2025 | Free Crypto'. Despite not being flagged by Google Safe Browsing, the low Gridinsoft trust score of 0/100 indicates a high level of suspicion.

If a user suspects they have been compromised through whaleairdrops.virtulmart.shop, they should immediately revoke any token approvals and move their funds to a new, secure wallet. For those who may have entered login credentials, changing passwords and enabling two-factor authentication (2FA) is crucial. Users should also monitor their accounts for any unauthorized transactions or fraud. To report this phishing site, users can submit the domain to PhishDestroy and other relevant security organizations for further analysis and action.