# bitcoinwalletextension.com — SUSPICIOUS

> PhishDestroy identifies bitcoinwalletextension.com as a fake Bitcoin wallet extension site impersonating the real Bitcoin brand.

## Summary
PhishDestroy identifies bitcoinwalletextension.com as a live brand-impersonation scam targeting Bitcoin users by mimicking a legitimate wallet extension.

This domain was flagged for impersonating Bitcoin and distributing a counterfeit browser extension designed to steal cryptocurrency wallet credentials. The site was registered through Name.com, Inc. on December 01, 2025, and resolves to IP 185.158.133.1. VirusTotal currently shows 0/95 detections, indicating it has not yet been widely blacklisted despite clear malicious intent. The domain uses a Google Trust Services SSL certificate to appear legitimate, but this does not guarantee safety.

Users who visited bitcoinwalletextension.com or downloaded the rogue extension risk having their Bitcoin wallets compromised. If you entered any wallet recovery phrases, private keys, or passwords on this site, immediately transfer your remaining funds to a newly generated wallet using a trusted device and browser. Revoke any permissions granted to browser extensions from unknown publishers and run a full antivirus scan. Avoid interacting with this domain entirely and report it to your antivirus provider and the real Bitcoin project maintainers.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Bitcoin

## Domain Intelligence
- Registered: 2025-12-01 17:33:27
- Registrar: Name.com, Inc.
- IP: 185.158.133.1

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/5f45caf6-8cd6-4886-b8b7-46872e6fe6ec
- PhishDestroy: https://phishdestroy.io/domain/bitcoinwalletextension.com/
- LLM endpoint: https://phishdestroy.io/domain/bitcoinwalletextension.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/bitcoinwalletextension.com/
Last updated: 2026-03-30