# rank-math-task.pages.dev — SUSPICIOUS

> PhishDestroy identifies rank-math-task.pages.dev as a crypto drainer mimicking Rank Math. Verify this domain on PhishDestroy before interacting—VT detections.

## Summary
PhishDestroy has flagged rank-math-task.pages.dev as a generic phishing domain potentially acting as a crypto drainer, specifically impersonating the Rank Math brand. Based on observed infrastructure and behavioral patterns, this domain appears designed to harvest cryptocurrency wallet credentials or initiate unauthorized transactions under false pretenses. The threat actor behind this campaign may be leveraging the perceived legitimacy of Rank Math—a widely used SEO plugin for WordPress—to deceive users into connecting fraudulent wallet interfaces or submitting sensitive authentication details. Analysts note that while the domain purports to offer rank-math-related services, its primary objective likely involves unauthorized fund transfers or credential theft.  

This domain resolves to IP 188.114.96.3 and is registered through Cloudflare, Inc., with a Google Trust Services SSL certificate in place. As of the latest scan, VirusTotal reported zero detections out of 95 security engines, indicating a newly active or stealthily operated infrastructure. The domain is currently unlisted on Google Safe Browsing (GSB) and has not been flagged by major blocklists, which increases the risk of exposure to end users. Additional telemetry suggests the domain was recently created, though exact registration dates remain unverified in public datasets.  

PhishDestroy has marked this domain as active under investigation, with ongoing monitoring for changes in behavior or infrastructure. Users are advised to avoid interaction and report any observed activities involving this domain. Immediate action includes blocking the IP 188.114.96.3 at the network perimeter and flagging the domain in corporate DNS solutions. Remaining risk is assessed as moderate due to the lack of detection coverage and the ongoing active status of the campaign. The absence of blocklist entries suggests this threat is still in early propagation phases, emphasizing the need for proactive threat hunting and user education to mitigate potential exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/rank-math-task.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/rank-math-task.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/rank-math-task.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rank-math-task.pages.dev/
Last updated: 2026-04-03