igxvbp[.]net

PhishDestroy identifies igxvbp.net as an active crypto drainer impersonating legitimate web3 services to steal cryptocurrency funds. This domain is currently propagating fraudulent links through social engineering tactics, primarily targeting unsuspecting users in the cryptocurrency space. The threat is classified as elevated due to confirmed malicious behavior and active distribution.

This domain was flagged by 1 of 95 VirusTotal security vendors, indicating limited but present detection coverage. The registrar is Gname.com Pte. Ltd., with the domain created on November 08, 2025. The domain resolves to IP 154.26.192.23 and has been detected on 1 security blocklist. Google Safe Browsing has categorized the site under SOCIAL_ENGINEERING, signaling its use in deceptive practices. The SSL certificate is issued by Let's Encrypt, which does not inherently indicate trustworthiness for this domain due to widespread abuse of free certificates by malicious actors. The domain is blocked by InversionDNS, providing an additional layer of protection for users leveraging this security service.

The domain igxvbp.net remains active and poses a significant risk to users engaging with cryptocurrency-related transactions. PhishDestroy recommends immediate avoidance of this domain and any associated URLs. Users should verify the authenticity of websites by checking official sources, such as the legitimate brand's official domain or trusted security platforms. Implementing network-level protections, such as DNS filtering services like InversionDNS, can prevent accidental exposure. Additionally, users should enable multi-factor authentication on all cryptocurrency accounts and remain vigilant for unsolicited links or messages promoting 'too good to be true' investment opportunities.