bluewallet-ai[.]pages[.]dev

PhishDestroy identifies the domain bluewallet-ai.pages.dev as an active crypto drainer posing as a legitimate wallet service. This fraudulent page masquerades as a cryptocurrency wallet tool to deceive users into connecting their wallets or entering private keys, leading to direct theft of digital assets. The malicious infrastructure is hosted on Cloudflare’s pages.dev subdomain, leveraging legitimate cloud services to appear trustworthy while distributing a crypto-draining payload. This domain was flagged due to clear indicators of malicious intent. As of the latest intelligence, VirusTotal shows 0 detections out of 95 scanning engines, indicating it has not yet been widely blacklisted. The domain bluewallet-ai.pages.dev is registered through Cloudflare, Inc., the hosting provider, and resolves to IP address 172.66.47.35. Google Trust Services issued its SSL certificate, adding a false veneer of legitimacy. The threat remains under investigation but is confirmed active, with no blocklist entries recorded at this time. If you have visited bluewallet-ai.pages.dev or interacted with it, immediately disconnect your wallet, revoke any connected permissions via your wallet’s interface, and scan your device for malware using a reputable security tool. Do not enter any private keys, seed phrases, or wallet passwords on this site. Report the domain to your wallet provider and consider transferring remaining funds to a secure, newly generated wallet address. Exercise extreme caution with any unsolicited links claiming to offer wallet or crypto services.