sparrowwallet[.]net

This domain, sparrowwallet.net, is identified as a crypto drainer, a type of malicious infrastructure designed to impersonate legitimate cryptocurrency wallet services. Analysis indicates it targets users by mimicking the branding of Sparrow Wallet, a known open-source Bitcoin wallet, to deceive victims into connecting their wallets. The domain employs drainer scripts to automatically transfer funds from compromised wallets to attacker-controlled addresses without user consent. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 3 out of 95 security vendors on VirusTotal, indicating moderate detection but persistent risk. It was registered on June 08, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with malicious domains. The SSL certificate is issued by Google Trust Services, providing a false sense of security. The domain appears on 5 security blocklists, including MetaMask, PhishDestroy, SEAL, OISD, and Hagezi, confirming its classification as a crypto drainer. No associated IP addresses were provided in the intelligence data, limiting further network-based attribution. As of the latest intelligence, sparrowwallet.net has been taken offline, reducing immediate exposure. However, the domain remains a residual risk due to its historical activity and potential for reactivation under a different registrar or hosting provider. Users who previously interacted with this domain should assume compromise and take immediate action: revoke wallet permissions, transfer remaining funds to a new wallet, and monitor transaction histories for unauthorized activity. The elevated risk level is maintained due to the irreversible nature of cryptocurrency transactions and the domain's prior use in fund-siphoning campaigns.