basewalletsupportservice[.]parclixlogistics[.]com

The domain basewalletsupportservice.parclixlogistics.com was observed as an offline crypto‑drainer site as of July 25 2026. Registration data shows the domain was created on 23 April 2025 and is hosted by Ultahost, Inc., using four authoritative nameservers (ns1‑ns4.ultahost.com). DNS resolution points to IP 79.133.41.61, which belongs to AS214036 (Ultahost, Inc.) and is geolocated in Germany. No TLS certificate is presented; the site serves only HTTP, and the sole page title returned is a generic “Index of /”, indicating an empty or directory‑listing page rather than a functional login portal.

Reputation metrics are uniformly negative: Gridinsoft assigns a trust score of 0 / 100, and the domain appears on a single security blocklist. PhishDestroy has actively blocked the host, and eight of ninety‑three VirusTotal scanners flagged the domain as malicious, reinforcing the suspicion of malicious activity despite the low detection count. The site is categorized as a “Crypto Scam” in the supplied intelligence, confirming its role as a crypto‑drainer. For defenders, the immediate recommendation is to add the domain and its resolving IP to inbound and outbound deny lists across firewalls, DNS filters, and proxy solutions.

Given the lack of SSL, any attempted HTTP connections can be trivially intercepted, but blocking prevents accidental user navigation. Continuous monitoring of the IP range 79.133.0.0/16 is advisable, as Ultahost hosts multiple abusive actors. Threat‑intel feeds should be updated to reflect the domain’s elevated risk level and its association with crypto‑drainer campaigns. Incident response teams should also audit logs for any prior connections to the domain or its IP to assess potential compromise.