# ranchimallstellarwallet.pages.dev — SUSPICIOUS

> ranchimallstellarwallet.pages.dev is linked to medium-risk crypto draining. Stay vigilant and protect your assets by learning more on PhishDestroy.

## Summary
PhishDestroy identifies ranchimallstellarwallet.pages.dev as an active medium-risk crypto drainer domain targeting cryptocurrency users. This domain is designed to illicitly access and drain digital wallets, posing a significant threat to victims' assets. The unique seed 9d7129 highlights the evolving tactics behind this scheme.

The domain resolves to IP address 188.114.96.3 and is registered via Cloudflare, Inc., leveraging their infrastructure for hosting and content delivery. VirusTotal analysis shows a limited number of security vendors flagging the domain, indicating emerging but not widespread detection. The use of Cloudflare services may complicate direct takedown efforts due to their protection mechanisms.

Currently, ranchimallstellarwallet.pages.dev remains active and continues to pose a threat to cryptocurrency users. PhishDestroy recommends heightened vigilance, avoiding suspicious wallet-related links, and employing robust security measures such as hardware wallets and multi-factor authentication. Reporting any suspicious activity related to this domain can aid in tracking and mitigating its impact.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP ?)
- Page title: Stellar Wallet - RanchiMall

## Domain Intelligence
- Registered: 2026-03-06 11:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: tina.ns.cloudflare.com will.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "Fortinet", "Phishing Database"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc27b-13ce-737c-8c2f-c1a603a65705.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/ranchimallstellarwallet.pages.dev
- Wayback Machine: https://web.archive.org/web/https://ranchimallstellarwallet.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/ranchimallstellarwallet.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ranchimallstellarwallet.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ranchimallstellarwallet.pages.dev/
Last updated: 2026-03-19