DANGEROUS

Pig-butchering / romance-crypto scam

2 of 92 antivirus engines flag this page. This is the platform behind a "pig-butchering" romance-investment scam — where someone you met online (dating app, WhatsApp, a "wrong number" text) walks you into crypto trading. The platform is fake, the early "profits" are bait, and you will never be able to withdraw. Stop depositing and cut contact.

Security Review

Is ibm.bitflyerweb.com legit or a scam?

Yes — this is almost certainly a scam.

Do this now:close this page. Don't enter passwords or card details, and don't download anything.

Fake IBM-branded crypto trading site on a 214-day-old typosquat of bitFlyer designed to drain wallets.

Cross-checked against 9 independent sources 3 raised a concern
ibm.bitflyerweb.comScanned 2h ago
0/100
Trust score
0 = danger · 100 = safe
DANGEROUS
Score breakdown
Heuristics 0·MT 12
Screenshot of ibm.bitflyerweb.comSee the live page ↓
Category tags
crypto fraudphishingHow sure we are: High
Technical red flags (4)
2 of 92 engines flaggedVisual clone of ibm.comScam-network signals (100/100)Typosquat of bitflyer.com
Warning signals (1)
Domain is 7 months old
Positive signals (3)
Not on major blacklistsEncrypted connectionClean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

What this means for you

Someone you met online probably steered you here to 'invest' together.

The platform is fake and the profits are staged. When you try to withdraw a real amount, it's locked behind fees — and the person vanishes.

How this scam works

The trap, step by step

  1. A friendly stranger (dating app, WhatsApp, a “wrong number” text) builds a relationship over days or weeks.

  2. They mention a “can't-miss” crypto or trading opportunity and walk you through a fake platform.

  3. Early “profits” and a small successful withdrawal earn your trust.

  4. You invest big; the account freezes, and the person vanishes with your money.

Recognising the pattern is the best defence — if a site follows these steps, close it and don't enter anything.

Analysis Summary

Threat Intelligence
2/92
Engines flagged this URL
Domain Age
7 months old
Registered Dec 11, 2025

Website Preview

Screenshot of ibm.bitflyerweb.com
LIVE RENDER
ibm.bitflyerweb.com
2 red flags
Red flags spotted on this page

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. Marker positions are approximate. See full visual analysis →

Visual analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

85
/ 100
Critical visual riskVisual clone

The page visually mimics ibm.com

The site inappropriately uses the IBM logo to lend false legitimacy to a cryptocurrency trading platform, a common tactic in investment scams. It further attempts to force users onto a mobile app, likely to evade browser-based security tools and analysis.

Visual risk85/100

What our vision model saw

5 signals

Unauthorized use of the IBM logo on a cryptocurrency trading interface

Generic 'Please use the mobile app' message used to restrict desktop inspection

Cryptocurrency market data displayed on a site using unrelated corporate branding

Minimalist layout lacking standard corporate footer, legal links, or contact info

Unprofessional design with high-contrast buttons and generic crypto-trading widgets

Intelligence

Advanced threat intelligence
Analysis
Critical scam likelihoodengineMT · Guardiantrust12/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
The page displays the IBM logo on a cryptocurrency interface while instructing users to connect a wallet, a clear wallet-drainer pattern. The domain ibm.bitflyerweb.com is a typosquat of the legitimate bitFlyer exchange and was registered only 214 days ago through Gname.com. No business registration, phone, email, or address appears anywhere on the site. Two independent reports already label the domain a confirmed crypto phishing and wallet-draining operation. The combination of brand impersonation, missing corporate details, and prior security flags leaves no plausible legitimate explanation.
Risk Factors
5
  • Domain only 214 days old with no business registration or contact details.
  • Uses IBM logo on a crypto trading page with no legitimate affiliation.
  • Typosquat of bitFlyer combined with "ibm" subdomain to impersonate both brands.
  • Already flagged by security researchers as a confirmed wallet drainer.
  • Zero contact information on a site asking users to connect cryptocurrency wallets.
Positive Signals
2
  • SSL certificate is valid and issued by Google Trust Services.
  • Hosting IP shows zero abuse reports.
The full analysis

Page Content

The page shows an IBM-branded crypto trading interface with the message "Please open in your wallet" and instructions to use MetaMask or Trust Wallet. No contact email, phone number, or postal address is present. The layout is minimal and lacks any corporate footer, legal links, or regulatory disclosures typical of legitimate exchanges.

Infrastructure

The site runs on IP 104.21.11.23 with a clean abuse score and valid SSL issued by Google Trust Services. One of 92 antivirus engines flagged the URL as malicious while browser blocklists remain clean. External scripts load only from static.cloudflareinsights.com.

Domain History

The domain bitflyerweb.com was registered 214 days ago on 11 December 2025 through Gname.com Pte. Ltd. It uses the subdomain "ibm" to create a false association with IBM. The domain is not listed in any official IBM or bitFlyer records.

Web Reputation

Security researchers have already identified ibm.bitflyerweb.com as a crypto phishing site and wallet drainer. IBM's own career page warns against recruitment and partnership scams using non-ibm.com domains. No positive reviews or business registrations were located for this domain.

What this means for you

Do not connect any wallet or enter credentials. The site combines two trusted brand names to trick users into approving malicious transactions that drain funds.

AI Recommendation
Do not connect any wallet or click any links. Close the page and report the URL to your wallet provider or browser security team.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for ibm.bitflyerweb.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Clones bitflyer.com
The page impersonates a well-known brand's site.
Typosquat check
Typosquat of bitflyer.com
Deliberate misspelling of a real brand's domain.
Web mentions
2 scam reports
Key findings
5 headline facts from open-web research
  • The domain ibm.bitflyerweb.com has been flagged by security platforms as a crypto phishing site and wallet drainer.
  • It combines the brand names of IBM and bitFlyer to create a false sense of legitimacy.
  • IBM has issued official warnings regarding recruitment and partnership scams using non-ibm.com domains.
  • The domain was registered recently (December 2025) and is not affiliated with the official bitFlyer exchange.
  • Security researchers associate this domain pattern with 'Pig Butchering' and 'Wallet Drainer' scam families.
Scam reports (2)
Direct quotes from public scam databases, forums, and news.
  • PhishDestroyopen

    "ibm.bitflyerweb.com favicon ibm.bitflyerweb.com ... PhishDestroy has identified ... confirmed crypto phishing site designed to drain digital wallets."

  • IBM Officialopen

    "There are recruitment scams where fraudulent entities claim to represent IBM... IBM Talent Acquisition does not use personal email domains... All legitimate correspondence will originate from ibm.com"

Impersonation / typosquat
Typosquat of bitflyer.com

The domain 'bitflyerweb.com' mimics the legitimate cryptocurrency exchange 'bitFlyer' and uses an 'ibm' subdomain to impersonate a partnership or corporate portal.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

PhishDestroy has flagged ibm.bitflyerweb.com as a confirmed crypto phishing site and wallet drainer. IBM's official careers page warns that legitimate IBM communications come only from ibm.com domains and that recruitment scams often use unrelated domains. No positive reviews or business registrations were found for this domain.

Domain Timeline

  1. Dec 11, 2025
    Domain registered

    First appeared in WHOIS records — 7 months old today.

  2. Jul 13, 2026
    Latest security review — Flagged as dangerous

    This scan re-ran every check; the current findings are detailed above.

Threat Detection

Scam Network

Cross-site correlation

This site shares signals with a broader cluster

Critical cluster

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score
0/100
ClearLowModerateHighCritical
Evidence (4)
  • Evidence confirms this site is a clone of bitflyer.com.
  • Domain is a typosquat of bitflyer.com.
  • Zero contact info on a crypto/gambling page — legitimate operators publish a licence and address.
  • Screenshot analysis found visual cloning of ibm.com.
Linked signals (4)
Clone of bitflyer.comTyposquat of bitflyer.comPattern · Contactless CryptoClone of ibm.com

Antivirus Engines

Detection matrix · live
2 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

1Malicious1Suspicious57Harmless92Engines
0
of 92
Netcraft
Malicious· malicious
Ermes
Suspicious· not recommended

2 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Scam-Type Likelihood

4 scam-type patterns detected
Scam-Type Likelihood

4 of 21 categories showed signals

We check every URL against 21 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Pig-Butchering / Romance-Crypto
Pig-Butchering / Romance-Crypto
High likelihood
80/100
  • Tagged as pig-butchering / romance-crypto scam.
  • Pig-butchering / romance-investment language.
Brand Impersonation
High likelihood
60/100
  • Visual clone of ibm.com detected in the screenshot.
  • Domain is a typosquat of bitflyer.com.
  • AI analyst tagged this as a brand / clone-site impersonation.
Phishing
Moderate likelihood
35/100
  • Domain is a typosquat of bitflyer.com.
  • AI analyst tagged this as phishing / data-harvesting.
Crypto Fraud
Moderate likelihood
33/100
  • AI analyst tagged this as crypto fraud / wallet-drainer.
  • AI analyst categorised the site as crypto-themed.

Technical Details

The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.

Domain & Encryption

Domain History
Age7 months old
RegistrarGname.com Pte. Ltd.
RegisteredDec 11, 2025
ExpiresDec 11, 2026
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresSep 24, 2026 (72d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://ibm.bitflyerweb.com/
  • 2200https://ibm.bitflyerweb.com/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

What to do

Pig-butchering / romance-crypto scam

This is the fake platform behind a "pig-butchering" scam — where someone you met online guides you into crypto trading.

  • Do not interact with ibm.bitflyerweb.com

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • Stop depositing and cut contact

    The person is a scammer, the platform is fake, and the balance you see is fabricated. Every extra deposit is lost — don't send more to "unlock" a withdrawal or pay "taxes".

  • The "profits" are bait — you can't withdraw

    Small early withdrawals are a trick to make you deposit more. Once you try to take out a large amount, it's frozen behind endless fees.

  • Report it — being targeted is not your fault

    Report to the FBI's IC3 (ic3.gov) or the FTC, and to your bank / exchange. These are professional operations run at scale.

    Open

Safer Alternatives

Trying to handle crypto? Use a safe option instead

Dealing with crypto? Use a regulated, well-established exchange rather than an unknown site — and never connect your wallet or enter a seed phrase on a page you can't verify.

Suggestions for safety only — not endorsements. Always verify the address bar before signing in or paying, even on well-known sites.

Final Verdict

0
Trust / 100
Final Verdict·ibm.bitflyerweb.com
DANGEROUS

This is a fake crypto trading page that impersonates both IBM and bitFlyer. The domain is only 214 days old, carries zero contact information, and has already been flagged as a wallet drainer by security researchers.

Do not connect any wallet or click any links. Close the page and report the URL to your wallet provider or browser security team.

AV engines
92
Domain age
7 mo
Flagged
2
Scan another URL
Security review completemalwaretips.com/url-scan

Safety FAQ

Common questions, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • ibm.bitflyerweb.com is a dangerous pig-butchering / romance-crypto — do not deposit funds or connect a wallet. Our review tagged it for crypto drainer and clone site. 2 of 92 security engines flag it (1 as outright malicious). The domain is 7 months old through Gname.com Pte. Ltd.. This pattern matches throwaway sites built to take money or data and disappear.
  • No — ibm.bitflyerweb.com scored just 8/100 on our trust scale, and we detected active threat indicators. We recommend avoiding it entirely: don't log in, pay, download anything, or connect a wallet.
  • If you've already paid or handed over details on ibm.bitflyerweb.com, act quickly. 1) Cryptocurrency payments are almost always irreversible, so a bank chargeback usually won't apply — instead report the wallet address to the exchange you sent from and ask them to flag it. 2) Report the site to the U.S. FTC at reportfraud.ftc.gov or the FBI's IC3 at ic3.gov, and in the UK to Action Fraud at actionfraud.police.uk. 3) If you entered a password, change it on ibm.bitflyerweb.com and anywhere you reused it, and turn on two-factor authentication. 4) Watch your bank and email for follow-up fraud, and keep screenshots as evidence.
  • Possibly, but it's difficult. Crypto transfers can't be reversed like card payments, so recovery usually depends on the receiving exchange freezing the funds — report the wallet address and transaction ID to that exchange and to IC3 (ic3.gov) as fast as you can. Be very wary of "recovery agents" who contact you promising to get your crypto back; that is almost always a second scam targeting victims.
  • Treat it as a "pig-butchering" scam. The pattern — a friendly stranger from a dating app, WhatsApp, or a "wrong number" text who gradually steers you into a crypto or trading platform — is a well-documented fraud. The platform (ibm.bitflyerweb.com) is fake, the profits it shows are fabricated bait, and when you try to withdraw a large amount it gets frozen behind "fees" or "taxes." Stop depositing, don't pay to "unlock" your balance, and cut contact.
  • You can report ibm.bitflyerweb.com through several official channels: the U.S. FTC at reportfraud.ftc.gov, the FBI's Internet Crime Complaint Center (IC3) at ic3.gov, and — in the UK — Action Fraud at actionfraud.police.uk. You can also flag it to Google Safe Browsing (safebrowsing.google.com/safebrowsing/report_phish) so other browsers warn about it, and report it to the company being impersonated if there is one. Reporting helps get scam sites taken down faster.
  • Modern scams are built to look convincing. A valid SSL padlock, a polished template, stock photos, fake reviews, and a trust badge can all be added in minutes and prove nothing about who runs the site. Scammers buy cheap domains, clone real designs, and copy legal pages wholesale. That's exactly why an automated review that checks the domain's age, hosting, blacklists, and behaviour — rather than just how the page looks — is more reliable than a first impression.
  • Yes. 2 of 92 antivirus and blocklist engines in our malware network flagged ibm.bitflyerweb.com, 1 of them as outright malicious. Even a single detection from a reputable engine is a meaningful warning, and multiple detections rarely happen by accident.
  • No — ibm.bitflyerweb.com is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.
  • ibm.bitflyerweb.com is 7 months old, registered on December 11, 2025 through Gname.com Pte. Ltd.. A multi-year registration history is one of the stronger signals against a scam, though it's never a guarantee on its own — established domains can still be misused.
  • ibm.bitflyerweb.com resolves to an IP operated by Cloudflare, Inc. in US (Content Delivery Network). Hosting location alone doesn't make a site good or bad — but hosting that doesn't match a brand's claimed country, or that sits on networks known for abuse, is one of the many signals we weigh alongside the verdict above.
  • This report is a record of the scan run on July 13, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about ibm.bitflyerweb.com has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.