wallet-infinito[.]com

The domain wallet-infinito.com has been identified as a brand impersonation threat targeting the Across cryptocurrency wallet platform. Analysis indicates this domain is designed to deceive users into disclosing sensitive credentials, including private keys or recovery phrases, by mimicking the legitimate Across wallet interface. As of the latest assessment, the domain has been taken offline, though prior activity remains a concern for historical exposure. Infrastructure analysis reveals the domain was registered through NiceNIC International Group Co., Limited on February 21, 2026, an atypical creation date suggesting potential domain spoofing or typosquatting tactics. It resolves to the IP address 172.67.201.61 and has been flagged by 3 security blocklists, including MetaMask, SEAL, and PhishDestroy. VirusTotal reports indicate 3 of 95 security vendors classify this domain as malicious, while Gridinsoft assigns it a trust score of 0/100. The page title, 'Infinito Wallet — Universal Crypto Wallet for DeFi, NFTs & Web3,' further confirms its intent to impersonate a legitimate wallet service. Current status confirms the domain is offline, reducing immediate risk of active exploitation. However, organizations and users should remain vigilant for residual threats, such as cached pages or secondary domains leveraging similar naming conventions. Recommended actions include blocking the domain and associated IP (172.67.201.61) at the network perimeter, updating endpoint protection rules to include this indicator of compromise, and conducting user awareness training to recognize brand impersonation tactics. Historical logs should be reviewed for connections to this domain to assess potential prior exposure.