franklin[.]it[.]com

This domain is flagged for hosting crypto drainer phishing infrastructure, designed to compromise digital wallet credentials and siphon cryptocurrency assets. The threat level is elevated due to its targeted nature and the irreversible financial losses associated with successful exploitation. Users encountering this domain risk unauthorized transactions and asset theft without recovery options. Analysis indicates the domain franklin.it.com was registered through Intis Telecom Limited on February 21, 2026, and resolves to the IP address 159.198.41.181. Security vendors on VirusTotal flagged the domain at a ratio of 1/95, while Gridinsoft assigned a trust score of 0/100. The domain appears on three security blocklists and was proactively blocked by wallet security providers and phishing detection systems. The page title 'Success!' suggests an attempt to mimic legitimate transaction confirmations, a common tactic in crypto drainer schemes. Mitigation requires immediate action from users who may have interacted with the domain. Those who entered wallet credentials or connected wallets should assume compromise and transfer assets to a new, secure wallet. Network administrators should block the domain and its resolving IP (159.198.41.181) at the firewall level to prevent access. Users should verify transaction confirmations directly within their wallet interfaces rather than relying on external pages. Given the irreversible nature of cryptocurrency transactions, vigilance and proactive security measures are critical to preventing asset loss.