custodial-dextradingclaims[.]pages[.]dev

Analysis indicates that custodial-dextradingclaims.pages.dev is an active crypto drainer infrastructure hosting a site titled "Multi Chain Protocol". The domain was created on 2024-06-11 and is registered through Cloudflare, Inc., using Cloudflare nameservers nora.ns.cloudflare.com and owen.ns.cloudflare.com. DNS resolution points to IP 188.114.96.3, an address owned by AS13335 Cloudflare in the United States. The web server presents a Google Trust Services / WE1 SSL certificate, enforces HSTS, and supports HTTP/3, returning HTTP 200 for the landing page. Security telemetry shows a Gridinsoft trust score of 0/100 and inclusion on a single blocklist (PhishDestroy). VirusTotal scans report that 9 of 91 security vendors flag the domain, reinforcing a high‑risk classification. While the site’s content has not been manually inspected, the combination of a recent registration, low trust score, blocklist presence, and multiple vendor detections aligns with known crypto‑drainer tactics that lure victims into transferring digital assets. Defenders should block the domain and its resolving IP at perimeter defenses, monitor for outbound connections to the address, and update intrusion‑detection signatures to flag any HTTP requests containing the "Multi Chain Protocol" title. Continuous threat‑intel feeds should be consulted for potential expansions of this infrastructure, and incident response teams should be prepared to investigate any compromised cryptocurrency wallets linked to traffic originating from this domain.