sswwrr32[.]pages[.]dev

PhishDestroy identifies sswwrr32.pages.dev as an active threat distributing a crypto drainer scam designed to steal digital assets by tricking victims into revealing wallet credentials or signing malicious transactions. This site attempts to harvest sensitive crypto account information, placing users' funds at significant risk of unauthorized withdrawal.

Technical analysis shows sswwrr32.pages.dev is registered through Cloudflare, Inc., and secured with an SSL certificate issued by Google Trust Services, which may lend an appearance of legitimacy. Despite this, VirusTotal reports 0 detections out of 95 antivirus engines, indicating it has not yet been widely flagged by automated scanners. The domain resolves to IP address 188.114.96.3 and currently remains unlisted on major blocklists. This combination suggests the actor is newly active or employing evasion techniques, warranting a risk level of under_investigation.

Users who have visited sswwrr32.pages.dev should immediately cease any interaction with the site and avoid submitting wallet credentials or signing transactions. It is critical to verify any suspicious links via trusted sources such as PhishDestroy and to monitor cryptocurrency accounts for unauthorized activity. For enhanced security, users should change passwords, enable two-factor authentication, and consider moving assets to new wallets if compromised.