one-reward[.]pages[.]dev

PhishDestroy identifies one-reward.pages.dev as an active crypto drainer scam designed to trick users into connecting crypto wallets under false pretenses of rewards. This domain leverages a deceptive Pages.dev URL structure to appear legitimate while hosting fraudulent content that drains digital assets upon wallet connection. Security researchers and users should treat this domain with extreme caution due to its clear malicious intent to steal cryptocurrency. This domain was flagged by VirusTotal with only 1 out of 95 security vendors detecting the threat as of the latest scan. The domain is registered through Cloudflare, Inc. and resolves to IP address 172.66.47.3. Its SSL certificate is issued by Let’s Encrypt, which may add a false sense of security but does not validate the site’s legitimacy. The domain uses a Pages.dev subdomain, a common tactic among threat actors to host malicious content under seemingly benign services. If you visited one-reward.pages.dev, do not connect your wallet or enter any personal or financial information. Disconnect your wallet immediately and revoke any connected permissions through your wallet provider’s security settings if tampering is suspected. Report the domain to your antivirus provider and block it using your network defenses. Consider rotating wallet credentials if you granted access. Share this alert with others to prevent further exposure. Always verify URLs and use trusted platforms for crypto transactions.