dapp[.]bgevents[.]cn

Analysis identifies the domain dapp.bgevents.cn as an active crypto drainer phishing threat, specifically designed to deceive cryptocurrency users into connecting their wallets and authorizing malicious transactions that drain funds. The domain is currently active and poses a high risk to individuals in the Web3 ecosystem. The page title, 'Pavo · The calm workspace for teams that ship,' is likely a decoy to impersonate a legitimate workspace or dApp interface, masking its malicious intent. No specific brand is directly impersonated, but the domain name suggests a focus on decentralized application (dApp) users.

Technical indicators provide concrete evidence of the threat. VirusTotal data shows the domain is flagged by 1 of 95 security vendors, indicating limited but confirmed detection. The domain was registered on October 27, 2025, through Web Commerce Communications Limited, a registrar often associated with low-reputation domains. It resolves to IP address 103.74.193.36, which may host additional malicious infrastructure. The SSL certificate is issued by Let's Encrypt, a legitimate certificate authority, which does not imply safety. The domain remains active, and no blocklist counts or trust scores are available beyond the VT detection ratio.

Given the active status and specific threat type, immediate action is recommended. Users should avoid visiting dapp.bgevents.cn or interacting with any content from this domain. Web3 users should never connect their wallets to unknown or unverified dApp interfaces. Security teams should block the domain at the network level and monitor for related infrastructure. Regular scanning of wallet addresses for unauthorized transaction approvals is advised. The high risk level warrants sustained monitoring and user awareness campaigns targeting cryptocurrency communities.