mur5ad[.]pages[.]dev

PhishDestroy identifies mur5ad.pages.dev as an active crypto drainer domain currently under investigation. This domain mimics legitimate services to trick users into connecting cryptocurrency wallets, enabling unauthorized fund transfers. The threat remains active and is being closely monitored for further indicators of compromise.

According to verified threat intelligence, mur5ad.pages.dev resolves to IP 188.114.96.3 and is registered through Cloudflare, Inc. This domain has not yet been flagged by any of the 95 VirusTotal vendors as of the latest scan. It holds a valid SSL certificate issued by Google Trust Services, which may contribute to its deceptive legitimacy. However, the lack of detections does not equate to safety, and users are strongly advised to exercise caution when encountering this domain or its associated links.

Given the active status and crypto drainer nature of mur5ad.pages.dev, PhishDestroy recommends immediate avoidance of this domain and any associated URLs. Users who may have interacted with this domain or entered sensitive information should disconnect their wallets from untrusted sites, revoke any unauthorized permissions, and monitor their transaction history for suspicious activity. Organizations are urged to update their threat intelligence feeds and block this domain at the network level to prevent further exposure.