trasnnaksi10jt-20jtterpecayaclaimsekarngtunguapalagi[.]pages[.]dev

This domain, trasnnaksi10jt-20jtterpecayaclaimsekarngtunguapalagi.pages.dev, operates as a crypto drainer designed to siphon cryptocurrency assets from unsuspecting users. Crypto drainers function by tricking victims into connecting their digital wallets to malicious smart contracts or scripts, which then execute unauthorized transactions, transferring funds to attacker-controlled addresses. The threat is particularly insidious because it does not require victims to enter passwords or seed phrases; instead, it exploits wallet permissions granted during the connection process. Once permissions are given, the drainer can empty the wallet of all compatible tokens and NFTs within seconds, leaving victims with little recourse for recovery. Analysis indicates this domain was registered on July 23, 2025, through Cloudflare, Inc., and resolves to the IP address 172.66.46.223, hosted on infrastructure belonging to AS13335 (Cloudflare, Inc.). As of the latest assessment, 18 out of 95 security vendors on VirusTotal have flagged the domain as malicious, with detection categories including phishing, crypto scam, and wallet drainer. The domain appears on at least one security blocklist and was proactively blocked by automated phishing detection systems. The SSL certificate, issued by Google Trust Services (WE1), provides encrypted connections but does not mitigate the underlying threat posed by the site’s functionality. The page title, 'Suspected phishing site | Cloudflare,' further corroborates its malicious classification. Users who visited trasnnaksi10jt-20jtterpecayaclaimsekarngtunguapalagi.pages.dev or interacted with its content should take immediate action to secure their assets. First, revoke any wallet permissions granted to the site using a trusted blockchain explorer or wallet management tool. Next, transfer remaining funds to a new, secure wallet address that has never been exposed to the malicious domain. Monitor all connected wallets for unauthorized transactions and report any suspicious activity to the relevant blockchain network or security platform. It is also recommended to scan the device used to access the site for malware, as crypto drainers may deploy additional payloads to maintain persistence or exfiltrate sensitive data. Finally, report the domain to security vendors and blocklist providers to aid in broader threat mitigation efforts.