sage-fairy-984e89[.]netlify[.]app

This domain, sage-fairy-984e89.netlify.app, is flagged for operating a crypto drainer scam disguised as a "Spin the Wheel for free Crypto" giveaway. Analysis indicates the site employs deceptive tactics to trick users into connecting cryptocurrency wallets, enabling unauthorized transactions that siphon funds directly to attacker-controlled addresses. The threat specifically targets users seeking quick financial gains, leveraging psychological manipulation to bypass security awareness. Infrastructure analysis reveals the domain is hosted on Netlify and resolves to the IP address 63.176.8.218. Despite its benign appearance, the site has not yet been flagged by security vendors, with VirusTotal reporting 0 detections out of 95 engines. The SSL certificate is issued by DigiCert Inc, a legitimate provider, which may contribute to the site's perceived credibility. Technologies detected include Bootstrap, React, and HSTS enforcement, suggesting a professionally designed frontend to enhance trustworthiness. No historical blocklist records or creation date anomalies were identified, though the domain remains under active investigation. Users who have visited sage-fairy-984e89.netlify.app or interacted with its content should immediately disconnect any connected wallets and revoke permissions via their wallet provider's interface. It is critical to audit recent transactions for unauthorized activity and transfer remaining funds to a new, secure wallet. Monitoring for phishing attempts via email or social media is advised, as attackers may attempt follow-up exploitation. If financial loss has occurred, reporting the incident to relevant authorities and blockchain analysis services is recommended to trace stolen assets.