bluewallett[.]com

The domain bluewallett.com is a confirmed phishing site engaged in brand impersonation targeting cryptocurrency users. It mimics the legitimate trading platform Drift, presenting itself as a portal for trading perpetual futures to deceive victims into disclosing wallet credentials or transferring funds. No drainer kit has been identified, but the site operates as a cryptocurrency scam. As of the latest verification, bluewallett.com has been taken offline, though prior activity remains a risk to those who interacted with it.

Technical indicators show bluewallett.com had 0 of 95 detections on VirusTotal, meaning no antivirus vendors flagged it at the time of analysis. The domain was registered through Tucows Domains Inc. on February 21, 2026, and resolved to the IP address 192.119.110.211, hosted by Hostwinds LLC in the Netherlands. It appeared on three security blocklists: PhishDestroy, MetaMask, and SEAL. The SSL certificate was issued by Let's Encrypt (E7), and the observed page title was 'Drift | Trade Perpetual Futures'. Nameservers included 1-you.njalla.no, 2-can.njalla.in, and 3-get.njalla.fo. Gridinsoft assigned a trust score of 0 out of 100.

Users who visited bluewallett.com should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords on the legitimate Drift platform and enable two-factor authentication. Report the domain to relevant authorities, including local cybercrime units and cryptocurrency fraud reporting platforms. MetaMask, PhishDestroy, and SEAL maintain blocklists that can be referenced for further protection.