wagy[.]xyz
“Wagyu | Private Cross-Chain Bridge”
wagy.xyz — Não verificado. Representação da marca: Bridge Scam; Tipo de golpe: Brand Impersonation. Resumo das evidências: VirusTotal 11/91 (alphaMountain.ai, BitDefender, CRDF, Forcepoint ThreatSeeker, Fortinet); Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 90/100. Registrador: Spaceship.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
This domain wagy.xyz poses a direct threat by impersonating a legitimate cross-chain bridge service under the name Wagyu. The site is designed to deceive users seeking to transfer cryptocurrency between blockchains. By mimicking a private bridge platform, it aims to trick visitors into connecting their wallets or entering private keys, leading to potential theft of digital assets. The risk level is high because the domain remains active and hosted on a dedicated IP address (185.165.169.123), enabling ongoing fraudulent operations.
Analysis confirms this threat through multiple technical indicators. VirusTotal reports 4 out of 95 security vendors flag the domain as malicious, indicating a consensus among antivirus engines. The domain was registered on June 04, 2026, via registrar Spaceship, Inc., and uses a Let's Encrypt SSL certificate to appear legitimate. The page title explicitly reads Wagyu | Private Cross-Chain Bridge, directly targeting the Bridge Scam brand. The domain's seed identifier is 31528c, and its current status is active, meaning it is still operational and capable of harvesting credentials or funds.
If you visited wagy.xyz, take immediate action. Disconnect any cryptocurrency wallet that was connected to the site and revoke all permissions granted to the domain. Run a full security scan on your device with updated antivirus software. Change passwords for all associated accounts, particularly those linked to cryptocurrency exchanges or wallets. Monitor your blockchain addresses for unauthorized transactions and consider moving remaining funds to a new, secure wallet. Report the domain to your security team or relevant authorities to help block further access.
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologias · 5 identified
Flask is a Python micro web framework ideal for rapidly constructing web applications, offering minimalism, flexibility, and modularity.
github.com 100% de confiançaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo