nebulacard[.]io

PhishDestroy identifies nebulacard.io as a generic phishing threat targeting cryptocurrency users. The site impersonates the NebulaCard brand, a crypto wallet service, to trick victims into revealing sensitive information or connecting their wallets to a malicious drainer. This domain was created on May 27, 2026, and its page title, "NebulaCard - Crypto wallet for life," was designed to appear legitimate. The threat type is generic phishing, with an elevated risk level due to its specialized targeting of crypto assets.

Technical indicators from PhishDestroy's analysis reveal that the domain resolves to IP 172.67.203.178 and uses an SSL certificate issued by Google Trust Services (WE1). VirusTotal data shows 2 out of 95 security vendors flagging the domain as malicious, and it appears on one security blocklist. The domain was registered through an undisclosed registrar and is currently offline, but its creation date and active certificate suggest it was recently operational. Notably, Google Safe Browsing (GSB) did not flag the domain, which may have contributed to its brief period of activity.

As of the latest check, nebulacard.io has been taken offline, likely due to reports from security vendors or hosting provider intervention. PhishDestroy recommends that users who may have visited the site or entered credentials immediately change their passwords and enable two-factor authentication on any associated accounts. The remaining risk is low while the domain is offline, but similar phishing campaigns may reappear under different domains. Users should always verify URLs directly with official sources and use PhishDestroy's verification tools before interacting with any crypto-related sites.