nftxwalletsecure[.]com

This domain, nftxwalletsecure.com, is identified as a crypto wallet drainer designed to impersonate the Across protocol. The site presents itself as a legitimate wallet security service under the title 'Nfts Wallet Secure,' but its primary function is to trick users into connecting their cryptocurrency wallets. Once connected, the site executes malicious scripts to drain funds from the victim’s wallet without consent, a tactic commonly associated with crypto drainer campaigns. The threat is classified as elevated due to its direct financial impact and the sophistication of its impersonation techniques. Analysis indicates this domain was registered on November 21, 2025, through Global Domain Group LLC, a registrar frequently associated with high-risk domains. The domain resolves to the IP address 198.251.89.82 and is flagged by 6 out of 95 security vendors on VirusTotal, including detections from Codeesura, Polkadot, PhishDestroy, and Enkrypt. Additionally, it appears on four independent security blocklists, and Gridinsoft assigns it a trust score of 0/100, further confirming its malicious nature. The combination of recent registration, low detection diversity, and targeted brand impersonation aligns with patterns observed in crypto-focused phishing infrastructure. If you visited nftxwalletsecure.com or interacted with its content, immediate action is required. Disconnect any wallets linked to the site and revoke permissions for all connected decentralized applications (dApps) using a wallet management tool. Scan the device used to access the site with updated security software to detect potential malware or unauthorized scripts. Monitor wallet transactions for unauthorized activity and consider transferring remaining funds to a new, secure wallet. Report the domain to relevant security communities and the impersonated brand to aid in takedown efforts and prevent further victimization.