nelswallet[.]com

Analysis of nelswallet.com indicates that the domain was created on July 04, 2025 and is currently taken offline. Registration was performed through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently observed in malicious infrastructure. The site has been classified as a crypto scam, specifically a crypto drainer, and has been blocked by the PhishDestroy blocklist. Independent scanning on VirusTotal returned eight positive detections out of ninety‑five participating security vendors, reinforcing the malicious assessment.

Gridinsoft assigned a trust score of zero out of one hundred, reflecting an extremely low reputation. The domain appears on a single external security blocklist, confirming that at least one third‑party service has flagged it for malicious activity. No additional infrastructure details such as IP address, autonomous system number, or hosting provider are available from the supplied intelligence, and no SSL certificate information or HTTP response codes have been reported.

Likewise, no page title, brand targeting, or detailed payload description has been disclosed, leaving those aspects unverified. Defenders should continue to enforce blocking of nelswallet.com at perimeter controls, update any intrusion detection signatures that reference the registrar or the observed trust score, and monitor for any re‑registration attempts that might reuse the same naming pattern. Incident response teams should also correlate internal logs for any outbound connections to the domain prior to its takedown, and consider quarantine of any assets that may have interacted with the site while it was active.