Перевірка домену phala-network.pages.dev на фішинг і безпеку

PhishDestroy identifies phala-network.pages.dev as an active generic phishing domain hosting a crypto drainer kit designed to steal cryptocurrency from unwary users. The domain impersonates Phala Network, a legitimate blockchain project, and is engineered to trick victims into connecting their wallets or entering credentials. Initial analysis confirms malicious behavior consistent with automated drainer scripts targeting Web3 users.

This domain was flagged with 2/95 detections on VirusTotal and registered through Cloudflare, Inc. It resolves to IP 188.114.96.3 and uses a Google Trust Services SSL certificate. Despite using a reputable infrastructure provider, the domain remains unlisted on Google Safe Browsing and has not been added to major threat blocklists. These technical indicators suggest a recently activated campaign with low detection coverage.

Current status: The domain is active and under active monitoring by PhishDestroy. Users are advised to verify any link to phala-network.pages.dev using PhishDestroy’s real-time lookup tool before engagement. While the immediate risk remains high due to low detection rates, proactive blocking and community reporting are underway to mitigate further exposure. Remaining risk is elevated due to unflagged status and ongoing availability.