bitgetwallet[.]com[.]cn

This domain, bitgetwallet.com.cn, is currently flagged as a high‑risk crypto drainer. Intelligence indicates it appears on three security blocklists and remains active. VirusTotal analysis shows that 19 out of 91 scanned security vendors have flagged the domain as malicious, confirming a substantial detection rate. In addition, the domain is actively blocked by PhishDestroy, MetaMask, and SEAL, demonstrating that multiple specialized anti‑phishing and cryptocurrency‑wallet protection products recognize it as a threat.

An HTTP request to the site returns a 200 status code, confirming that the host is reachable and capable of serving content to victims. The available data does not disclose the underlying infrastructure, such as registrar, IP address, ASN, or TLS certificate details, leaving the full attack surface uncharacterized. Likewise, the page title, content, and any associated malware kits have not been publicly released, so the exact technique used to drain crypto assets remains unknown. Nonetheless, the convergence of blocklist listings, vendor detections, and protective product blocks provides strong evidence that the domain is being used to solicit cryptocurrency credentials or to redirect victims to malicious wallet services.

Defenders should immediately add bitgetwallet.com.cn to network‑level deny lists and ensure endpoint security solutions are updated to include the latest signatures for this indicator. Monitoring outbound traffic for connections to this domain, especially from devices handling cryptocurrency wallets, is advised. Organizations using MetaMask or similar extensions should verify that the built‑in blocklist is current, and administrators of PhishDestroy and SEAL should maintain the domain in their block policies. Continuous re‑evaluation is recommended, as further infrastructure details may emerge that could affect remediation scope.