dogitarefund[.]pages[.]dev

This domain, dogitarefund.pages.dev, operates as a crypto drainer phishing site designed to compromise decentralized finance (DeFi) users by impersonating the legitimate SynthDeFi platform. The fraudulent page, titled 'SynthDeFi - Synthesizing the Future of DApps,' mimics the branding and interface of the authentic service to deceive victims into connecting cryptocurrency wallets. Once connected, the site executes unauthorized transactions, draining funds from the victim’s wallet by exploiting smart contract interactions or prompting the approval of malicious token allowances. The threat specifically targets users of decentralized applications (DApps) who may be lured by promises of staking, yield farming, or token swaps, making it a high-risk vector for financial loss in the blockchain ecosystem. Analysis of the domain’s infrastructure reveals multiple indicators of malicious activity. The domain is registered through Cloudflare, Inc., and resolves to the IPv6 address 2a06:98c1:3121::3, a network segment commonly associated with content delivery and proxy services. It was created on October 26, 2025, indicating recent deployment likely timed to coincide with market trends or specific DeFi campaigns. Security vendors on VirusTotal flagged the domain at a rate of 11/95, a significant detection ratio that underscores its malicious intent. Additionally, the domain appears on two security blocklists, including PhishDestroy and OISD, further corroborating its classification as a phishing threat. The SSL certificate, issued by Google Trust Services, provides a veneer of legitimacy but does not mitigate the underlying risk posed by the site’s functionality. Users who visited dogitarefund.pages.dev or interacted with its content should take immediate remedial actions to mitigate potential financial loss. First, revoke any smart contract approvals granted to unknown or suspicious addresses using a blockchain explorer or wallet management tool. This step is critical to prevent further unauthorized transactions. Next, transfer remaining funds to a new wallet address that has not been exposed to the phishing site. Monitor all connected wallets for unusual activity, including small test transactions or unexpected token approvals, which may indicate ongoing compromise. If credentials or private keys were entered, consider the wallet permanently compromised and avoid reusing passwords or recovery phrases. Finally, report the domain to relevant security communities or blockchain analytics platforms to aid in tracking and disrupting the phishing infrastructure.