mantra-4zy[.]pages[.]dev

mantra-4zy.pages.dev is currently under investigation as a crypto drainer phishing domain. The site resolves to IP 172.66.44.56 and leverages Cloudflare’s infrastructure, which may obscure its true origin. PhishDestroy identifies this domain as a generic phishing page with zero detections on VirusTotal (7/95 engines). It is registered through Cloudflare, Inc., and operates with an SSL certificate issued by Google Trust Services, giving it a false appearance of legitimacy. The domain’s IP address (172.66.44.56) is part of Cloudflare’s CDN range, a common tactic among phishing operators to evade detection. Unlike traditional phishing pages, this domain does not yet appear on major blocklists, though its active status and low detection rate suggest it may be newly deployed. Users should avoid interacting with mantra-4zy.pages.dev, especially if prompted for cryptocurrency transactions or wallet connections. PhishDestroy recommends verifying the domain’s reputation using its threat intelligence tools before proceeding. If already engaged, revoke any connected wallet permissions immediately and scan devices for malware. Always cross-check URLs against known phishing databases to prevent exposure to crypto drainers.