pagewithdrawal[.]netlify[.]app

The domain pagewithdrawal.netlify.app is a generic phishing site designed to deceive users into disclosing sensitive information such as login credentials or personal data. It does not impersonate a specific brand or utilize a known crypto drainer kit. As of the latest verification, the site has been taken offline, reducing immediate risk but not eliminating the potential for future malicious activity under the same or similar domains.

Technical indicators confirm the domain's malicious nature. Pagewithdrawal.netlify.app was flagged by 2 of 95 security vendors on VirusTotal, including G-Data and Gridinsoft, and appears on 2 security blocklists: PhishDestroy and ScamSniffer. The domain was registered through Name.com, Inc (Netlify) on February 21, 2026, and resolves to the IP address 63.176.8.218, hosted on Amazon.com, Inc.'s infrastructure (AS16509) in Germany. The SSL certificate is issued by DigiCert Inc under the 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' chain. The site returned a 'Site not found' page with an HTTP 404 status, and technologies detected include Netlify and HSTS.

Users who may have interacted with pagewithdrawal.netlify.app should immediately change any exposed credentials, particularly for financial or email accounts, and enable two-factor authentication where available. Monitor accounts for unauthorized activity and report any suspected fraud to relevant institutions. To mitigate future risks, consider reporting the domain to additional blocklists or security platforms, such as Google Safe Browsing or local cybersecurity authorities. If crypto wallet interactions occurred, revoke any suspicious token approvals and transfer funds to a new wallet.