yieldguild-main-staging-branch-push[.]pages[.]dev

This domain, yieldguild-main-staging-branch-push.pages.dev, operates as a crypto drainer phishing site designed to impersonate a legitimate Web3 gaming platform. Visitors are presented with a fraudulent interface mimicking the authentic Yield Guild Games website, complete with branding elements and a deceptive login or wallet connection prompt. The objective is to trick users into linking their cryptocurrency wallets, enabling attackers to siphon funds without authorization. The page title, 'Home of Web 3 Games l Yield Guild Games,' reinforces the illusion of legitimacy, increasing the likelihood of successful exploitation. Analysis indicates the domain was registered on August 05, 2024, through Cloudflare, Inc., a registrar frequently utilized for both legitimate and malicious infrastructure. It resolves to the IP address 104.21.16.1, hosted on Cloudflare’s network (AS13335). Detection data from VirusTotal reveals that only 2 out of 95 security vendors currently flag the domain as malicious, suggesting it remains under-detected. Additionally, the domain appears on two security blocklists, including PhishDestroy and ScamSniffer, further corroborating its malicious intent. The SSL certificate, issued by Google Trust Services, provides a false sense of security to unsuspecting users. If you have visited yieldguild-main-staging-branch-push.pages.dev or interacted with its content, immediate action is required. Disconnect any linked wallets from the site and revoke any suspicious token approvals using a blockchain explorer or wallet management tool. Monitor your wallet for unauthorized transactions and consider transferring assets to a new, secure wallet if compromise is suspected. Report the domain to relevant security platforms to aid in broader detection efforts. Exercise caution with future Web3 interactions, verifying domain authenticity before connecting wallets or entering credentials.