# checker-brevis.network — MALICIOUS — Crypto Drainer (Angel Drainer)

> Checker-brevis.network is linked to a crypto drainer phishing scheme. Learn how it works and protect your assets. Stay alert and avoid risks now.

## Summary
PhishDestroy identifies checker-brevis.network as a medium-risk crypto drainer domain. It masqueraded as a 'Brevis Airdrop Registration Portal' to lure victims into revealing sensitive information.

This phishing campaign used the Angel Drainer kit to steal cryptocurrency by tricking users into connecting wallets or sharing private keys. The domain was flagged on multiple security blocklists and has since been taken offline.

Users should never trust unsolicited airdrop offers or connect wallets on unknown sites. Always verify URLs, use hardware wallets, and report suspicious domains to reduce exposure to crypto theft.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Angel Drainer)
- Site status: dead (HTTP 403)
- Drainer type: Angel Drainer
- Scam type: Airdrop Scam
- Kit: Airdrop Scam
- Page title: Brevis Airdrop Registration Portal

## Domain Intelligence
- Registered: 2025-12-29 00:00:00
- Expires: 2026-12-29 00:00:00
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.172.207
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: apollo.ns.cloudflare.com sneh.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 9 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "CyRadar", "Ermes", "Forcepoint ThreatSeeker", "Fortinet", "Gridinsoft", "Seclookup", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 7 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer", "Polkadot", "SEAL", "Enkrypt", "Codeesura"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019b9366-c5cf-7249-8202-07dfabd1c293.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/be6d6b7a-1686-4f8a-b928-56bb06dd41c0
- Wayback Machine: https://web.archive.org/web/https://checker-brevis.network
- PhishDestroy: https://phishdestroy.io/domain/checker-brevis.network/
- LLM endpoint: https://phishdestroy.io/domain/checker-brevis.network/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/checker-brevis.network/
Last updated: 2026-03-19