mamikaze[.]pages[.]dev

PhishDestroy identifies Mamikaze.pages.dev (seed: a30a3b) as an active crypto drainer phishing domain designed to steal cryptocurrency assets from unsuspecting victims. This fraudulent site masquerades as a legitimate platform, exploiting Cloudflare's infrastructure to evade detection while hosting malicious JavaScript payloads that drain connected wallets. Security researchers have observed redirection chains to this domain from compromised social media accounts and malicious advertisements, where attackers impersonate popular crypto services to trick users into connecting their wallets under false pretenses. This domain was flagged by PhishDestroy under the generic_phishing threat category with a risk level marked as under_investigation. VirusTotal currently shows 0 detections out of 95 scanning engines, indicating it remains undetected by most antivirus solutions as of the latest scan. The domain resolves to IP address 172.66.47.13, which is part of Cloudflare's proxy network, and operates with a valid Let's Encrypt SSL certificate to appear legitimate. Registered through Cloudflare, Inc., this domain was detected using seed a30a3b, suggesting it may belong to a broader campaign targeting crypto enthusiasts. If you have visited Mamikaze.pages.dev, immediately disconnect your wallet from the site and revoke any unauthorized permissions through your wallet's settings. Do not enter any personal information or wallet credentials on this domain. Run a full system scan using reputable antivirus software to check for potential malware infections. Report this domain to PhishDestroy for further analysis and consider using hardware wallets or transaction simulation tools to verify crypto transactions before approval. Stay vigilant against similar threats by verifying unknown domains on PhishDestroy before interacting with them.