igram-b05[.]pages[.]dev

PhishDestroy identifies igram-b05.pages.dev as a crypto drainer phishing domain hosting a fraudulent login portal designed to steal cryptocurrency wallet credentials and drain funds. The site mimics legitimate Instagram-related services to deceive users into entering private keys or connecting wallets, after which attackers initiate unauthorized transfers. Evidence confirms this domain is currently active and under investigation for malicious activity targeting crypto users. This domain is registered through Cloudflare, Inc., and resolves to IP 172.66.44.134. It holds a valid Let’s Encrypt SSL certificate to appear legitimate. VirusTotal analysis shows 1 out of 95 security engines flagged the domain as malicious at the time of assessment, indicating it remains under the radar. The site is hosted on Cloudflare Pages, a common tactic to quickly deploy and rotate phishing infrastructure. Initial scans show no third-party blocklists have flagged it yet, though dynamic detection rates may increase as threat intelligence evolves. If you or someone you know visited igram-b05.pages.dev, immediately disconnect any connected cryptocurrency wallets and revoke any permissions granted. Do not enter credentials or private keys on the site. Scan all devices used for crypto transactions using up-to-date antivirus software. Report the domain to PhishDestroy for further investigation and to help protect others. Always verify URLs and use trusted platforms for crypto services—never trust shortened or unfamiliar domains.