sealana-dashboard[.]pages[.]dev

PhishDestroy identifies sealana-dashboard.pages.dev as an active crypto drainer kit masquerading as a Solana wallet interface. The domain delivers a malicious JavaScript payload designed to siphon cryptocurrency from unwitting users by intercepting wallet transactions and exfiltrating private keys. No legitimate brand is impersonated; instead, the threat actor leverages a generic dashboard naming scheme to lure victims searching for Solana-related tools.

Technical indicators confirm elevated risk: the domain resolves to IP 188.114.97.3, is registered through Cloudflare, Inc., and holds a Google Trust Services SSL certificate. VirusTotal analysis shows 1 out of 95 security vendors flagged the domain at time of inspection. While the exact creation date is not provided, the combination of Cloudflare proxying, Google-issued TLS, and low VT detection suggests a recently deployed campaign optimized for evasion.

This domain remains active and unblocked by major threat intelligence platforms as of latest scan. Immediate user action includes blocking access via DNS filtering and reporting the domain to security vendors. Remaining risk is elevated due to active hosting, low detection coverage, and the potential for rapid propagation through social engineering, particularly within Solana-focused communities.