bet-windrift[.]club

PhishDestroy has flagged bet-windrift.club as a high-risk crypto drainer domain currently under investigation. This domain masquerades as a legitimate platform to deceive users into connecting cryptocurrency wallets, enabling unauthorized fund transfers. The payload—undetected by VirusTotal—poses an immediate threat to users engaging with this site without verification. Given its active status and lack of detections, proactive blocking is strongly advised.

This domain was registered through Dynadot Inc on April 11, 2026, and resolves to IP 188.114.97.3. It operates under a Let’s Encrypt SSL certificate, adding superficial legitimacy. Notably, VirusTotal currently shows 0 detections across 95 AV engines, indicating minimal third-party scrutiny. No blocklists or reputation engines have flagged this domain yet, leaving users vulnerable to exploitation. The seed identifier a72af4 confirms this as a fresh, uninvestigated threat vector.

To mitigate exposure, PhishDestroy recommends users avoid interacting with bet-windrift.club entirely. Block the domain and IP address at the network level using DNS filtering or endpoint policies. For users who may have already visited, disconnect all cryptocurrency wallets immediately and scan devices for malware using trusted tools. Report any suspicious transactions to your wallet provider and local authorities. Proactive scanning remains the best defense against emerging crypto drainers like this one.