btcbsc-lk7[.]pages[.]dev

PhishDestroy has flagged btcbsc-lk7.pages.dev as an active crypto drainer scam under investigation. This domain mimics legitimate crypto platforms to trick users into connecting wallets and authorizing malicious token transfers. The threat is classified as high-risk due to its direct targeting of cryptocurrency users and the potential for irreversible financial losses. This domain resolves to IP 172.66.46.244 and is registered via Cloudflare, Inc., using a Google Trust Services SSL certificate to appear legitimate. As of the latest scan, VirusTotal reports 2 out of 95 security vendors detecting this domain, indicating it remains under the radar. The domain is hosted on Cloudflare Pages, a service often abused by threat actors to rapidly deploy and rotate malicious infrastructure. No known blocklists currently flag this domain, and trust scores remain unassessed due to its recent activation. The seed identifier b2330b confirms this is part of a tracked campaign. Mitigation for this crypto drainer threat requires immediate action. Users should avoid visiting btcbsc-lk7.pages.dev or interacting with any associated links. If a wallet connection was authorized, revoke permissions immediately via the wallet’s interface or a reputable revoke tool. Enable transaction simulation features in wallets to detect malicious transfers before approval. Report the domain to your wallet provider and relevant crypto security platforms (e.g., MetaMask’s phishing detection, Etherscan’s report form). Block the IP 172.66.46.244 at the network level if possible. Always verify URLs and use bookmarks for official crypto platforms to prevent falling victim to similar scams.