synfutures[.]harbitrage[.]com

Analysis of the domain synfutures.harbitrage.com confirms its classification as a wallet seed phishing site targeting users of the Base network. The domain was registered on November 4, 2025, through HOSTINGER operations, UAB, and resolved to the IP address 88.223.84.214, hosted under AS47583 (Hostinger International Limited) in the United States. Infrastructure analysis reveals the use of nameservers ns1.dns-parking.com and ns2.dns-parking.com, a pattern observed in other phishing campaigns leveraging low-cost or automated domain registration services. As of July 25, 2026, the domain is offline, though it was previously flagged by 12 of 95 security vendors on VirusTotal, indicating moderate detection coverage.

Gridinsoft assigned a trust score of 0/100, further corroborating its malicious classification. The domain appears on at least one security blocklist, and PhishDestroy has explicitly blocked it. No SSL certificate was present, increasing the likelihood of interception or manipulation of user data in transit. The page title, SynFutures, suggests an attempt to impersonate a legitimate cryptocurrency or decentralized finance (DeFi) platform, though the exact content and functionality of the site remain unanalyzed.

The scam type is explicitly categorized as wallet/seed phishing, targeting cryptocurrency users through credential harvesting or seed phrase theft. Defenders should treat this domain as confirmed malicious and prioritize blocking it at the DNS, proxy, or endpoint level. Organizations operating in the cryptocurrency or DeFi sectors are advised to monitor for references to this domain in logs or user reports and to educate users on recognizing phishing attempts targeting wallet recovery phrases. Given the domain's offline status, further forensic analysis may be limited, but historical DNS and WHOIS records should be preserved for incident response purposes.