sealana-in[.]pages[.]dev

PhishDestroy identifies sealana-in.pages.dev as an active crypto drainer phishing domain with an elevated risk level. This domain is currently active and is designed to deceive users into transferring cryptocurrency to attacker-controlled wallets through fraudulent transaction prompts. The threat actor leverages a convincing impersonation of a legitimate service to trick victims into authorizing unauthorized transfers, posing significant financial risk to unsuspecting users.

This domain was flagged by 1 of 95 VirusTotal security vendors, indicating low but notable detection coverage. Registered through Cloudflare, Inc., it resolves to IP address 172.66.44.63 and utilizes a Google Trust Services SSL certificate to enhance its appearance of legitimacy. The domain is hosted on Cloudflare Pages, a platform often exploited by threat actors to rapidly deploy phishing infrastructure with minimal overhead. Despite its use of a reputable CDN and SSL certificate, the domain remains under-evaluated by security vendors, increasing the likelihood of successful deception.

Users are strongly advised to avoid interacting with sealana-in.pages.dev and verify any suspicious links or transactions using PhishDestroy’s real-time threat intelligence platform. Given the domain’s active status and low detection rate, the risk of exposure remains elevated. Organizations and individuals should implement strict verification protocols for cryptocurrency transactions and educate users on recognizing crypto drainer tactics, such as unsolicited transaction prompts or deceptive wallet connection requests. Blocking this domain at the network level and reporting it to PhishDestroy can further mitigate potential threats.