mypivxwallet[.]org

The domain mypivxwallet.org is a phishing site that engaged in brand impersonation of Discord, presenting itself as a PIVX wallet service to deceive users. The site is currently taken offline, and it posed a social media scam threat with an elevated risk level, though no specific drainer kit was identified. Visitors to mypivxwallet.org were at risk of credential theft or fraud due to its deceptive nature.

Technical analysis of mypivxwallet.org reveals it was flagged by 1 of 95 VirusTotal vendors, including SOCRadar, and appeared on 1 security blocklist, PhishDestroy. The domain was registered through Tucows Domains Inc. on February 20, 2021, and resolved to IP address 188.114.97.3, located in the US and hosted by AS13335 Cloudflare, Inc. Its SSL certificate was issued by Let's Encrypt / R12, and the page title observed was 'My PIVX Wallet'. Google Safe Browsing did not flag the domain, and its Gridinsoft trust score was 0/100.

Users who interacted with mypivxwallet.org should take immediate safety steps. Since this was a credential/login phishing scam targeting Discord credentials, change any passwords used on the site, enable two-factor authentication on affected accounts, and monitor for unauthorized activity. Report the domain to Discord's trust and safety team and to security blocklists like PhishDestroy. If any crypto wallet access was compromised, revoke token approvals and move funds to a new wallet.