DANGEROUS

Crypto scam / wallet-drainer

web3secure.coinfxgo.com is a look-alike (homoglyph) of a well-known domain. Signals match fake investment platforms and wallet drainers. Never connect a wallet, paste a seed phrase, or deposit crypto here.

Security Review

Is web3secure.coinfxgo.com legit or a scam?

Our verdict:Dangerous· 8/100

Scammy Web3 crypto wallet phishing page with fake Google/AWS badges, wallet connect traps, and detections from Gridinsoft and Fortinet.

web3secure.coinfxgo.comScanned 29d ago
0
Trust score
DANGEROUS
Heuristics 0·MT 12
Category tags
crypto#Phishing#Crypto Fraud#Data Harvester98% MT confidence
Technical red flags (3)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

Wallet-drainer patterns detected

This page uses language and API references consistent with modern crypto wallet-drainer kits. If you connected your wallet or signed a transaction on this site, assume your wallet is compromised — revoke approvals, move funds to a fresh wallet with a new seed phrase, and treat the original as burned.

  • ·Page asks for a wallet seed phrase / recovery phrase — legitimate wallets never do this.
View density

Analysis Summary

Threat Intelligence
0/93
Engines flagged this URL
Domain Age
88 days old
Registered Feb 8, 2026
MT Intelligence
Dangerous
Critical likelihood · 98% confidence

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Critical scam likelihoodengineMT · Guardiantrust12/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
The site pretends to be a secure Web3 vault for staking, farming, and crypto backups but screams scam with prominent 'Connect Wallet' buttons. Gridinsoft labels it phishing while Fortinet calls it spam, backed by visuals of fake badges from AWS, Uber, Google, and inflated stats like '1.36 Billion Secured Volume'. No contact info appears anywhere, and the 88-day-old domain on scam-heavy Hetzner hosting matches crypto drainer patterns. Homoglyph issues add to the red flags, overriding the clean IP and SSL.
Full dossier
Analysis complete

Page Content

  • Claims to be 'Web3 System Network Vault' offering staking, farming, DeFi, NFTs, and wallet backups.
  • Heavy push for 'Connect Wallet' with no real features loaded; body text cuts off mid-promo.
  • Zero emails, phones, or addresses; loads external fonts and chat widget from smartsuppchat.com.

Infrastructure

  • Hosted on IP 138.201.204.31 (Hetzner ASN with high scam activity); valid Let's Encrypt SSL expiring in 61 days.
  • Domain 88 days old via Global Domain Group LLC, no privacy protection.
  • No redirects but homoglyph detected; not indexed in global traffic ranks.

Domain History

  • Registered just 88 days ago — too new for a legit crypto service.
  • No prior history or traffic signals.

Web Reputation

  • 1/93 antivirus engines flag malicious (Gridinsoft: phishing), 1 suspicious (Fortinet: spam).
  • Clean on browser blocklists and sandbox, but visuals confirm drainer tactics.
Risk Factors
7
  • Gridinsoft detects phishing; Fortinet flags as spam.
  • Fake trust badges using AWS, Uber, Google, MSN, Facebook logos.
  • Exaggerated fake stats: '30 Million Global Investors', '$1.36 Billion Secured Volume'.
  • Prominent 'Connect Wallet' buttons designed to drain crypto.
  • Domain only 88 days old with zero contact info.
  • Hosted on Hetzner ASN known for scam density.
  • Homoglyph detected in URL structure.
Positive Signals
4
  • Valid Let's Encrypt SSL certificate.
  • Hosting IP has zero abuse reports.
  • Clean on major browser blocklists.
  • No sandbox detections.
AI Recommendation
Do not visit or connect any wallet — this is a crypto drainer. Stick to official apps from trusted sources like MetaMask.
Scam network detected
1 linked domain correlated

Matches contactless-crypto-new-domain pattern; Hetzner hosting with elevated scam density, zero contacts, young domain.

cdn.jsdelivr.net
Next-gen fraud intelligence
Evidence-backedCross-checked

Website Preview

Screenshot of web3secure.coinfxgo.com
LIVE RENDER
web3secure.coinfxgo.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

100
/ 100
Critical visual risk

Visual red flags detected in the screenshot

Highly scammy crypto wallet landing page with multiple fake trust indicators, brand logos, and urgency prompts typical of phishing drainers.

Visual risk100/100

What our vision model saw

5 signals

Fake trust badges with logos of unrelated brands including AWS, Uber, Google, MSN, Facebook.

Exaggerated unverified stats like '30 Million Global Investors', '700+ Secured Wallet', '$1.36 Billion Secured Volume'.

Prominent 'Connect Wallet' button in hero section.

Fake chat support widget with blue bubble in bottom right.

'Secured Wallet' and 'Secured Volume' invented trust indicators.

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for web3secure.coinfxgo.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
2 months
Registered Feb 2026
Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
No scam reports found
No complaints, no negative coverage turned up in our sweep.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Moderate correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score
0/100
ClearLowModerateHighCritical
Evidence (2)
  • Hosted on AS24940 (HETZNER-AS Hetzner Online GmbH, DE) — an ASN with elevated scam density.
  • Zero contact info, crypto/gambling content, and the domain is only 88 days old — hallmark of a drainer farm.
Linked signals (2)
cdn.jsdelivr.netPattern · Contactless Crypto NEW Domain

Antivirus Engines

Detection matrix · live
2 engines flagged this URL

We cross-check every URL against our antivirus network of 93 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

1Malicious1Suspicious58Harmless93Engines
0
of 93
Gridinsoft
Malicious· phishing
Fortinet
Suspicious· spam

2 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Sandbox Render
Page rendered in a safe sandbox
Requests made0
Unique IPs0
Countries2
Detected brandsNone

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.

Domain & Encryption

Domain History
Age88 days old
RegistrarGlobal Domain Group LLC
RegisteredFeb 8, 2026
ExpiresFeb 8, 2027
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · R13
ExpiresJul 8, 2026 (61d)
Self-signedNo
Hosting & Technology
HostingHetzner Online GmbH
Server locationDE

Server Reputation

Hosting
CountryGermany
NetworkHETZNER-AS Hetzner Online GmbH, DE
IP address138.201.204.31
Abuse Intelligence
Confidence score0%
Reports on file0
ISPHetzner Online GmbH
Usage typeData Center/Web Hosting/Transit

Scam-Type Likelihood

2 scam-type patterns detected
Scam-Type Likelihood

0 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Crypto Fraud
Crypto Fraud
High likelihood
0/100
  • AI analyst tagged this as crypto fraud / wallet-drainer.
  • Page asks for wallet connect or seed-phrase / private key.
  • AI analyst categorised the site as crypto-themed.
Phishing
Low-level signals
0/100
  • AI analyst tagged this as phishing.

Crypto scam / wallet-drainer indicators

The page shows patterns common to crypto-investment scams, fake airdrops, and wallet drainers.

  • Do not interact with web3secure.coinfxgo.com

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • Never paste your seed phrase anywhere

    Legitimate wallets, exchanges and support staff will never ask for your 12/24-word recovery phrase. Typing it into any website — even one that looks real — gives attackers full access to your funds.

  • If you already connected a wallet

    Revoke token approvals immediately using revoke.cash or Etherscan's Token Approvals tool. Move remaining funds to a fresh wallet (new seed phrase). Assume the original wallet is compromised.

  • Report the wallet and URL

    File a report at IC3 (FBI Internet Crime Complaint Center) or your country's cybercrime portal. Recovery is unlikely, but reports help law enforcement map the network.

    Open

Trust History

Trust score over time
Last 2 public scans of web3secure.coinfxgo.com
8/100
-2 vs Apr 23
Apr 23May 7

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.

  • Our automated security review flags web3secure.coinfxgo.com as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Final Verdict

0
Trust / 100
Final Verdict·web3secure.coinfxgo.com
DANGEROUS

This fake Web3 crypto vault site pushes wallet connections amid fake trust badges and bogus stats. Our antivirus partners flag it as phishing and spam, confirming it's a drainer scam. Avoid it entirely and never connect a wallet.

Do not visit or connect any wallet — this is a crypto drainer. Stick to official apps from trusted sources like MetaMask.

AV engines
93
MT passes
2
Net signals
2
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.