strt-ldgr-n[.]pages[.]dev

The domain strt-ldgr-n.pages.dev has been identified as a crypto drainer scam site, leveraging a fraudulent login facade to pilfer cryptocurrency wallet credentials and funds. This malicious infrastructure masquerades as a legitimate service, likely targeting unsuspecting users through phishing campaigns or deceptive redirects. The drainer kit employed in this campaign is designed to harvest private keys, seed phrases, or wallet connection requests, enabling threat actors to siphon digital assets without victims' knowledge. Initial telemetry suggests this campaign is still in its early stages, with active infrastructure undergoing rapid iteration to evade detection mechanisms. This domain resolves to IP address 172.66.44.184, registered through Cloudflare, Inc., and utilizes a Google Trust Services SSL certificate to lend an air of legitimacy. VirusTotal currently shows a clean detection score of 0/95, indicating this threat remains under the radar of most antivirus engines. The domain's recent registration and absence from blocklists underscore its evasive tactics, while simultaneous use of Cloudflare and a reputable SSL issuer demonstrates operational sophistication aimed at bypassing security controls. The page title mimics a generic, non-descript string, likely to avoid triggering heuristic-based defenses. As of latest assessments, strt-ldgr-n.pages.dev remains active, with no observed takedown or mitigation measures from hosting providers or security vendors. Users are strongly advised to avoid interacting with this domain and verify any suspicious links via PhishDestroy's real-time scanning tool. Pending further OSINT enrichment or additional telemetry analysis, this domain remains classified as an active but low-profile threat vector, warranting heightened vigilance from cryptocurrency users and SOC teams. Further monitoring will determine if this campaign scales into a larger operation or transitions to a dormant state to preserve its infrastructure.