mainnodes-connect[.]pages[.]dev

This domain, mainnodes-connect.pages.dev, is currently under investigation for crypto-draining phishing activity. Infrastructure analysis reveals it is hosted on Cloudflare infrastructure, resolving to IP 188.114.96.3 (CA) with nameservers carlos.ns.cloudflare.com and leanna.ns.cloudflare.com. The domain was registered on March 26, 2026, and remains active as of July 12, 2026, serving content with an HTTP 200 status. The page title, 'All Fix to Web3 In One Place | Coins MainNodes,' suggests a focus on cryptocurrency services, aligning with the reported scam type of a crypto drainer. The domain is flagged by one security blocklist and holds a trust score of 0/100 from Gridinsoft, indicating high suspicion. While no detections were reported by the 94 vendors that scanned it on VirusTotal, this absence does not confirm safety. The SSL certificate is issued by Google Trust Services (WE1), a common provider for both legitimate and malicious domains. No evidence of a specific phishing kit or targeted brand is present in the available data, though the crypto drainer classification implies an intent to steal digital assets. Defenders should treat this domain as high-risk, particularly in environments handling cryptocurrency transactions. Monitoring for connections to 188.114.96.3 or the associated Cloudflare nameservers may help identify related malicious activity. Further analysis of the site's content and behavior is recommended to confirm its exact mechanics and potential targets.