# mainnetsportal.pages.dev — SUSPICIOUS

> Beware: mainnetsportal.pages.dev is a crypto drainer phishing site. VirusTotal shows 0/95 detections. Verify its safety on PhishDestroy before engaging.

## Summary
PhishDestroy has flagged mainnetsportal.pages.dev as an active crypto drainer phishing domain designed to trick users into connecting fraudulent wallet addresses. This malicious site mimics legitimate blockchain portals to deceive visitors into approving unauthorized transactions, potentially draining crypto funds. Security researchers have observed similar domains leveraging Cloudflare Pages to host impersonation pages targeting crypto enthusiasts seeking access to fake mainnet services.  This domain exhibits multiple red flags across threat intelligence platforms. VirusTotal currently shows 0 detections out of 95 antivirus engines scanning the domain, indicating it remains under the radar despite active malicious activity. Registered through Cloudflare, Inc., the domain resolves to IP address 188.114.96.3 and holds an SSL certificate from Google Trust Services, which attackers often exploit to appear legitimate. The domain's infrastructure suggests a deliberate attempt to bypass traditional security measures while maintaining plausible deniability through legitimate hosting services. Further investigation reveals this domain has not been added to any major blocklists at this time.  Users who have visited this domain should immediately disconnect from the site and avoid entering any wallet credentials or transaction approvals. Revoke any unauthorized wallet connections through your wallet provider's connection management settings, and transfer funds to a new wallet if you suspect compromise. Report this domain to PhishDestroy for analysis and consider blocking it at your network level. Monitor your transaction history for suspicious activity and enable multi-factor authentication on all crypto-related accounts. If you interact with this domain, assume your private keys may have been compromised and take immediate steps to secure your assets.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b21c4bc6-400b-4d1c-af92-dc2046526456
- PhishDestroy: https://phishdestroy.io/domain/mainnetsportal.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/mainnetsportal.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/mainnetsportal.pages.dev/
Last updated: 2026-03-24