sentimal[.]pages[.]dev

The domain sentimal.pages.dev has been identified as a crypto drainer phishing site, targeting cryptocurrency wallet credentials and funds. As of the latest analysis, the domain is offline, though prior activity indicates malicious intent to siphon digital assets from unsuspecting users. No specific brand impersonation has been confirmed, but the infrastructure aligns with known crypto drainer operations observed in recent campaigns. Infrastructure analysis reveals the domain was registered on March 31, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. Despite its recent creation, the domain has already been flagged by three security blocklists, including MetaMask and PhishDestroy. VirusTotal reports 0 of 95 detections, suggesting the site has not yet been widely flagged by antivirus engines. The SSL certificate is issued by Google Trust Services, a common tactic to lend legitimacy to phishing pages. Gridinsoft assigns a trust score of 0 out of 100, further corroborating its malicious nature. The domain is currently offline, though threat actors may reactivate or migrate the phishing infrastructure to a new address. Users are advised to verify wallet addresses before transactions, employ hardware or multi-signature wallets for high-value assets, and monitor for unauthorized access. Security teams should update blocklists to include this domain and its associated IP, while reviewing logs for prior interactions with 188.114.97.3. Given the low VirusTotal detection rate, proactive monitoring of newly registered domains with similar patterns is recommended.