nftswalletsecure[.]com

The domain nftswalletsecure.com was registered on 14 May 2025 through Global Domain Group LLC. Its authoritative nameservers, ns107.my-control-panel.com and ns108.my-control-panel.com, resolve the domain to the IPv4 address 198.251.88.32, which is announced by AS53667 (FranTech Solutions) and geolocated to the United States. No TLS certificate is presented, indicating that the site operated without HTTPS encryption. The page title returned by HTTP requests is “Nfts Wallet Secure”, matching the declared scam type of wallet/seed phishing. VirusTotal analysis shows that fifteen of ninety‑five security vendors flagged the domain as malicious, and the Gridinsoft trust score is recorded as zero out of one hundred, reflecting a consensus of high danger.

Multiple independent blocklists have listed the domain, with four distinct security blocklists confirming its presence. Additionally, dedicated anti‑phishing services such as PhishDestroy, Polkadot, Enkrypt and Codeesura have each added the domain to their block lists, reinforcing the classification as a brand‑impersonation attempt targeting the “across” brand. The site’s current status is offline, preventing real‑time verification of content, but the historical evidence indicates a deliberate attempt to harvest cryptocurrency wallet credentials.

Defenders should continue to enforce blocklist rules for the domain and the associated IP address, monitor any residual traffic to 198.251.88.32, and consider updating intrusion‑prevention signatures to include the observed nameserver pattern. Because the domain lacks HTTPS and exhibits a zero trust score, any residual connections should be terminated, and users should be warned against entering wallet seeds or credentials on sites presenting the “Nfts Wallet Secure” title. Ongoing vigilance is advised, as the registration infrastructure (Global Domain Group LLC) and hosting provider (FranTech Solutions) have been used in prior credential‑stealing campaigns.