loan[.]nuvixwallet[.]com

The domain www.loan.nuvixwallet.com is a phishing site engaged in brand impersonation targeting users of the 'across' platform. It presents itself as a cryptocurrency wallet service under the false pretense of 'Kitgetwallet wallet to store your assets', aiming to deceive victims into revealing seed phrases or private keys. This is classified as a seed-phishing scam, not a crypto drainer kit. As of the latest verification, www.loan.nuvixwallet.com has been taken offline, though prior activity remains a risk for those who interacted with it.

Technical indicators confirm the elevated risk level. The domain was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). It was registered on 2025-08-23 22:31:40 through Atak Domain and resolves to the IP address 198.12.66.123, hosted on AS36352 (HostPapa) in the US. No SSL certificate was issued for the site, and its nameservers are ns1.host-forest.com and ns2.host-forest.com. Gridinsoft assigned a trust score of 0/100, further indicating malicious intent.

Victims of www.loan.nuvixwallet.com should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new, secure wallet. If seed phrases or private keys were entered, assume the original wallet is compromised. Change passwords for any accounts linked to the phishing site, enable two-factor authentication, and monitor for unauthorized transactions. Report the domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand's security team to aid in takedown efforts.