# cryptoallstarsio-sale.pages.dev — SUSPICIOUS

> PhishDestroy identifies cryptoallstarsio-sale.pages.dev as a crypto drainer posing as a fake sale page. Flagged by 0 of 95 VirusTotal vendors as of seed 334219.

## Summary
PhishDestroy identifies cryptoallstarsio-sale.pages.dev as an active crypto drainer impersonating a promotional sale page for CryptoAllStars. This domain is currently under investigation but remains accessible to users. The threat involves malicious scripts designed to drain cryptocurrency wallets upon interaction, posing significant financial risk to unsuspecting victims.

This domain was flagged by 0 of 95 VirusTotal vendors as of seed 334219, indicating it has not yet been widely recognized by automated detection systems. Registered through Cloudflare, Inc., it resolves to IP 172.66.47.56 and utilizes a Google Trust Services SSL certificate. The infrastructure behind this domain is designed to evade early detection, relying on legitimate cloud providers to host malicious content. While creation date and blocklist count remain unverified at this stage, the absence of detections underscores the stealthy nature of this campaign.

The current status of cryptoallstarsio-sale.pages.dev is active and under investigation. PhishDestroy recommends users avoid interacting with this domain or any linked cryptocurrency-related promotions. If you have visited this page, disconnect your wallet immediately and scan for unauthorized transactions. Report this domain to your antivirus provider and relevant blockchain security platforms to aid in takedown efforts. Exercise heightened caution with unsolicited crypto offers and verify official sources before engaging.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.56

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/cryptoallstarsio-sale.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/cryptoallstarsio-sale.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/cryptoallstarsio-sale.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cryptoallstarsio-sale.pages.dev/
Last updated: 2026-04-04