cryptoallstarsio-sale[.]pages[.]dev

PhishDestroy identifies cryptoallstarsio-sale.pages.dev as an active crypto drainer impersonating a promotional sale page for CryptoAllStars. This domain is currently under investigation but remains accessible to users. The threat involves malicious scripts designed to drain cryptocurrency wallets upon interaction, posing significant financial risk to unsuspecting victims.

This domain was flagged by 13 of 95 VirusTotal vendors as of seed 334219, indicating it has not yet been widely recognized by automated detection systems. Registered through Cloudflare, Inc., it resolves to IP 172.66.47.56 and utilizes a Google Trust Services SSL certificate. The infrastructure behind this domain is designed to evade early detection, relying on legitimate cloud providers to host malicious content. While creation date and blocklist count remain unverified at this stage, the absence of detections underscores the stealthy nature of this campaign.

The current status of cryptoallstarsio-sale.pages.dev is active and under investigation. PhishDestroy recommends users avoid interacting with this domain or any linked cryptocurrency-related promotions. If you have visited this page, disconnect your wallet immediately and scan for unauthorized transactions. Report this domain to your antivirus provider and relevant blockchain security platforms to aid in takedown efforts. Exercise heightened caution with unsolicited crypto offers and verify official sources before engaging.