future-wallet[.]io

future-wallet.io is an active domain observed in multiple threat‑intelligence feeds as a crypto drainer. The domain was registered on 20 January 2026 through Immaterialism Limited and currently resolves to IP address 91.92.241.159. The authoritative name servers are ns1.metaquotes.business and ns2.metaquotes.business, which differ from the registrar’s typical infrastructure and may indicate the use of a third‑party DNS service to obscure ownership.

VirusTotal analysis shows that three of ninety‑one scanning engines have flagged the domain, suggesting a modest but non‑trivial detection rate. Independent blocklist providers have listed the domain on three separate blocklists, and it is actively blocked by PhishDestroy, MetaMask, and SEAL, confirming that at least some security products consider it malicious. The threat type is identified as a crypto drainer, implying that the site is likely used to harvest private keys or initiate unauthorized cryptocurrency transfers.

Evidence beyond the registration and DNS data is not publicly available; page title, SSL certificate details, or HTTP response codes have not been disclosed, leaving the exact payload or phishing page content unknown. Defenders should add 91.92.241.159 and future-wallet.io to URL filtering and firewall deny lists, monitor outbound connections to the IP for anomalous wallet activity, and enforce multi‑factor authentication on cryptocurrency platforms to limit credential reuse. Continuous re‑evaluation of the domain’s status is advised, as further analysis may reveal additional infrastructure or victim reports.