nabicous[.]com

Analysis of the domain nabicous.com indicates confirmed phishing infrastructure targeting cryptocurrency users through brand impersonation. The domain was registered on November 13, 2025, via NiceNIC International Group Co., Limited, and resolves to IP address 172.67.197.147, hosted on Cloudflare's network (AS13335) in the United States. Nameservers george.ns.cloudflare.com and lindsey.ns.cloudflare.com further confirm Cloudflare as the DNS provider. No SSL certificate was detected at the time of assessment, increasing the risk of unencrypted credential interception.

The site's page title, 'Nabicous Wallet - Cold Storage Cryptocurrency Hardware Wallet | Secure Private Key Management,' explicitly positions it as a cryptocurrency wallet service, aligning with the reported scam type of wallet/seed phishing. The domain impersonates the brand 'across,' though the exact nature of this impersonation (e.g., protocol, service, or product) is not detailed in available data. Detection by 16 of 95 security vendors on VirusTotal and inclusion on the PhishDestroy blocklist corroborate its malicious classification. Gridinsoft assigns a trust score of 0/100, reinforcing its elevated risk status.

Infrastructure analysis reveals the domain was taken offline by July 23, 2026, though its prior operational state and duration of activity remain unconfirmed. Defenders should treat this domain as a confirmed phishing threat, particularly for cryptocurrency-related fraud. Historical DNS and WHOIS records should be preserved for further investigation, and any residual resolution attempts should be blocked. No evidence links this domain to legitimate services, and its registration details offer no verifiable legitimacy.