learn-abraxas-wallet[.]pages[.]dev

This domain, learn-abraxas-wallet.pages.dev, is assessed as a crypto drainer scam targeting cryptocurrency wallet users. Infrastructure analysis reveals the domain was registered on March 23, 2026, through Cloudflare, Inc., and currently resolves to the IP address 188.114.97.3, hosted in Canada under Cloudflare’s network. The domain is served with an SSL certificate issued by Google Trust Services (WE1) and employs security technologies including HSTS and HTTP/3, likely to enhance perceived legitimacy and evade basic detection mechanisms. As of the report date, the domain returns an HTTP 403 status, indicating access is forbidden or the site has been taken offline. The page title, 'Abraxas Wallet — Secure, Compliant Crypto Wallet for Individuals,' suggests an attempt to impersonate a legitimate cryptocurrency wallet service. No evidence confirms the exact content or functionality of the site, as the domain is currently inaccessible.

The scam type is classified as a crypto scam, specifically a crypto drainer, based on available threat intelligence. Detection data indicates the domain appears on one security blocklist and is flagged by 3 of 94 security vendors on VirusTotal, signaling moderate but not widespread detection. The domain is also blocked by PhishDestroy. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification. The nameservers, jean.ns.cloudflare.com and woz.ns.cloudflare.com, are consistent with Cloudflare’s infrastructure, which is frequently leveraged by threat actors for its CDN and privacy features.

Defenders should treat this domain as a confirmed malicious indicator associated with cryptocurrency theft. Although the domain is currently offline, it may resurface under the same or similar infrastructure. Network-level blocking is recommended for the domain and its resolving IP (188.114.97.3).