ratel-website[.]pages[.]dev

The domain ratel-website.pages.dev is flagged as a generic phishing site. It does not appear to be associated with a specific brand or crypto drainer kit, but the nature of the threat suggests it was likely used to impersonate a legitimate login page to steal user credentials. The site was hosted through Cloudflare, Inc., which provides infrastructure and DNS services.

Analysis indicates that the domain has a VirusTotal score of 0/95, suggesting that it has not been flagged by many security engines as malicious. The domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.49. The domain was created on April 03, 2026, and is currently listed on one security blocklist. The SSL certificate is issued by Google Trust Services, which may have been used to lend a false sense of security to potential victims. The domain has a Gridinsoft trust score of 0/100, indicating a complete lack of trustworthiness.

As of the current analysis, the domain ratel-website.pages.dev has been taken offline. This action may have been initiated by security researchers, the hosting provider, or automated systems. Despite the domain being offline, the infrastructure used, including the Cloudflare registrar and the SSL certificate, suggests that the threat actors may attempt to reuse this domain or similar infrastructure in the future. Users are advised to remain vigilant and avoid clicking on any links or entering credentials on pages with similar domain names or infrastructure. Security professionals should monitor for similar domains and IP addresses to detect and prevent potential future campaigns.