MALICIOUS — CRITICAL
Is web3-bitgetwallet.net a Crypto Drainer Impersonating Bitget?
web3-bitgetwallet[.]
PhishDestroy identifies web3-bitgetwallet.net as an active crypto drainer targeting Bitget users.
- VirusTotal
- 1/92
- Blocklists
- 2 · MetaMask, SEAL
- Доступність
- Контент недоступний · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
web3-bitgetwallet.net — Контент недоступний (HTTP 502). Уособлення бренду: Bitget; Тип шахрайства: Brand Impersonation. Зведення доказів: VirusTotal 1/92 (Gridinsoft); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 70/100. Реєстратор: Gname.
Докладний аналіз PhishDestroy AI нижче залишено англійською, щоб зберегти оригінальний криміналістичний запис.
Evidence Analysis
PhishDestroy identifies web3-bitgetwallet.net as an active crypto drainer targeting Bitget users. This domain was flagged for brand impersonation and is currently under investigation for malicious activity.
This domain poses a high-risk threat to cryptocurrency holders by mimicking Bitget's official wallet interface, designed to deceive users into connecting their wallets and draining funds. Evidence supporting this assessment includes a VirusTotal detection score of 1/95 (indicating no current antivirus signatures have flagged it), registration through Gname.com Pte. Ltd. on May 12, 2026, and resolution to IP address 137.220.184.253. The domain relies on a Let's Encrypt SSL certificate to appear legitimate, a common tactic in phishing operations.
Users who visited web3-bitgetwallet.net should immediately disconnect their wallets from any connected dApps and revoke permissions via their wallet settings. If cryptocurrency was transferred or wallet access was granted, report the incident to the relevant blockchain explorer and consider transferring remaining funds to a new wallet. Always verify domain legitimacy through official channels or trusted threat intelligence platforms like PhishDestroy before interacting with crypto-related websites.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Обсяг даних13 recorded checks
Розвіддані з мережевої безпеки
Процес реагування на загрози Pipeline
Статус у публічних блоклистах
Збережений знімок
Аналітика доменів
Технічні деталіDNS, SAN-адреси SSL, мітки часу
ICANN OVERSIGHT
Акредитація та контекст RAA
Акредитація та контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Технології · 9 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 100% впевненостіSalesforce is a cloud computing service software (SaaS) that specializes in customer relationship management (CRM).
www.salesforce.com 100% впевненостіReact is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 100% впевненостіNext.js is a React framework for developing single page Javascript applications.
nextjs.org 100% впевненостіNetlify providers hosting and server-less backend services for web applications and static websites.
www.netlify.com 100% впевненостіHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% впевненостіCloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100% впевненостіCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% впевненостіАналіз VirusTotal
Архівні докази
Докази та зовнішні звітиIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Якщо ви ввели облікові дані облікового запису, особисту чи платіжну інформацію або завантажили файл із цього домену, негайно вживіть заходів. Нижче наведено ресурси, які допоможуть вам повідомити про інцидент і захистити себе.
Зверніться до місцевих органів влади
Виберіть свою країну, щоб отримати офіційні контакти кіберзлочинців або створити проект скарги →.