web-abaraxxn-wallets[.]pages[.]dev

PhishDestroy identifies web-abaraxxn-wallets.pages.dev as an active crypto drainer site designed to illicitly transfer cryptocurrency assets from unsuspecting users’ wallets without consent. The domain mimics legitimate wallet service pages to deceive visitors into connecting wallets under false pretenses, triggering unauthorized transactions. Security investigations confirm the presence of drainer scripts tailored to exploit wallet connection protocols, enabling silent asset exfiltration once a victim approves a transaction request.

Domain analysis reveals technical indicators that reinforce its malicious classification. Hosted at IP 188.114.96.3 via Cloudflare, the site uses a Google Trust Services SSL certificate to appear legitimate. With a VirusTotal detection score of 1/95 security vendors flagging the domain, it ranks among low but persistent threats. Although previously unlisted on major blocklists, the drainer signature aligns with known wallet-targeting kits such as AbaraXXN, which automate fund transfers upon wallet connection.

As of the latest assessment, this domain remains active and poses an elevated risk to cryptocurrency users engaging with deceptive wallet interfaces. While no takedown action has been recorded at this time, proactive blocking through network security tools and browser-based protections is strongly advised. Users are urged to avoid interacting with unsolicited wallet links and verify domains and certificates independently before any connection request. Remaining risk is classified as elevated due to active deployment and lack of coordinated mitigation.