eagleairesearch-com[.]pages[.]dev

PhishDestroy identifies eagleairesearch-com.pages.dev as a crypto drainer domain actively distributing malicious payloads to siphon cryptocurrency from unsuspecting users. This subdomain under Cloudflare’s pages.dev platform resolves to IP 188.114.97.3 and leverages a Google Trust Services SSL certificate to appear legitimate, masking its true intent. Google’s Safe Browsing service has already flagged this domain with the 'SOCIAL_ENGINEERING' tag, indicating a high likelihood of deception targeting crypto investors. This domain was flagged by PhishDestroy with critical indicators: 0 detections out of 95 VirusTotal scanners as of the latest scan, registered through Cloudflare, Inc., and currently under active investigation for phishing. It was created recently (exact date not disclosed) and has not yet been widely blocked by major threat intelligence platforms, making it particularly dangerous due to its low detection rate. The domain’s infrastructure is designed to mimic legitimate research platforms, tricking users into connecting crypto wallets or entering sensitive credentials. If you have visited eagleairesearch-com.pages.dev, disconnect any connected crypto wallets immediately using your wallet’s official interface. Revoke unauthorized permissions via your wallet’s app or website settings. Do not enter any credentials or approve transactions on this domain. Report the incident to your wallet provider and change passwords for any accounts linked to the device used to access this site. Use a trusted antivirus tool to scan for malware, as crypto drainers often deliver secondary payloads. Share this advisory with others to prevent further infections.