boltcardwallet[.]com

The domain boltcardwallet.com was registered on 21 February 2026 through Tucows Domains Inc. The authoritative name servers 1-you.njalla.no, 2-can.njalla.in and 3-get.njalla.fo resolve the domain to the IP address 170.75.163.162, which is hosted in Canada under AS174 belonging to Cogent Communications. The web server returns an HTTP 200 response and presents a page titled “Bolt Card Wallet - Connect your bolt card”. The site uses a publicly trusted Let’s Encrypt TLS certificate identified with the E7 identifier. VirusTotal records indicate that 14 of 93 scanning engines flagged the domain as malicious, and the domain is listed on a single external blocklist that is enforced by PhishDestroy. AlienVault Open Threat Exchange includes boltcardwallet.com in one threat‑intelligence pulse.

Technical fingerprinting reveals the presence of Ubuntu, Apache HTTP Server, Bootstrap, Lightbox and embedded YouTube components. Independent scoring services assign a Gridinsoft trust score of 0 / 100 and a Scamadviser rating of 31 / 100, both reflecting a high‑risk assessment. The intelligence categorises the activity as a “Crypto Scam”, indicating a crypto‑drainer motive, although no details on the specific draining technique or wallet addresses have been disclosed, leaving those mechanisms uncertain. Defensive recommendations include adding boltcardwallet.com to domain deny lists, blocking or sinkholing the associated IP address, and monitoring DNS queries to the three njalla name servers for signs of infrastructure reuse.

Because the TLS certificate is valid, organizations may need TLS inspection or proxying to intercept traffic. Users of wallet or cryptocurrency management tools should enforce multi‑factor authentication and be warned against unsolicited prompts matching the observed page title. Ongoing re‑scanning with VirusTotal and periodic checks of AlienVault OTX are advised to track any changes in detection status.