en-atumic-wallet[.]pages[.]dev

This domain, en-atumic-wallet.pages.dev, is under investigation for operating as a crypto drainer phishing site. Analysis indicates no direct association with a specific brand or known drainer kit, though the naming convention suggests an attempt to mimic legitimate cryptocurrency wallet services. The domain exhibits characteristics typical of crypto drainers, which are designed to siphon digital assets from unsuspecting users by exploiting wallet connection prompts or malicious smart contracts. Infrastructure analysis reveals the following technical indicators: the domain currently resolves to the IP address 172.66.47.42 and was registered through a content delivery network provider on April 04, 2026. The SSL certificate is issued by a trusted certificate authority, which is common in phishing campaigns to evade initial suspicion. VirusTotal reports 0 detections out of 95 engines, indicating no prior flagging by security vendors. The domain appears on a single blocklist, and its Gridinsoft trust score is 0/100, reflecting high suspicion. Google Safe Browsing (GSB) status is not explicitly provided but is presumed unlisted due to the lack of detections. As of the latest assessment, the domain has been taken offline, likely due to enforcement actions by the hosting provider or security entities. The page title explicitly labels it as a suspected phishing site, further corroborating its malicious intent. Despite its offline status, residual risk remains for users who may have interacted with the domain prior to its takedown. It is recommended to monitor for any resurgence under similar naming conventions or infrastructure, and to verify wallet addresses and transaction hashes associated with this domain for potential unauthorized activity.