pixel-oassemble[.]pages[.]dev

pixel-oassemble.pages.dev is a tenant hostname on Cloudflare, not a separately registered domain. PhishDestroy first recorded this hostname on Jun 23, 2026. The stored content classification is crypto drainer. The assembled evidence scores 81/100 (high).

Three independent sources are positive: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 2 detections among 91 engines: alphaMountain.ai, Forcepoint ThreatSeeker on Jul 27, 2026 at 02:12 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 14:20 UTC. The evidence is not unanimous. Google Safe Browsing returned no flag on Jun 23, 2026 at 12:40 UTC. URLScan completed without a malicious verdict (score 0) on Jun 25, 2026 at 08:16 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 10:02 UTC. Cloudflare is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 188.114.97.3 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. This is shared platform infrastructure; the IP and ASN are hosting context, not attribution to unrelated tenants. The stored server header is cloudflare. Captured page title: “Compiler”. DOM analysis completed on Jun 23, 2026 at 14:20 UTC; stored DOM score 75/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Jul 29, 2026 at 01:59 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. The platform TLS certificate was issued by Google Trust Services / WE1 with validity through Sep 19, 2026; checked Jun 23, 2026 at 13:00 UTC.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as crypto drainer.