en-us-wallet[.]pages[.]dev

PhishDestroy identifies en-us-wallet.pages.dev as an active domain exhibiting elevated risk due to its role as a crypto drainer. This type of threat targets users' cryptocurrency wallets to illicitly extract funds without consent, posing significant financial risk to victims.

en-us-wallet.pages.dev resolves to the IP address 172.66.46.247 and is registered through Cloudflare, Inc. The domain currently holds an SSL certificate issued by Google Trust Services, which may lend it a deceptive appearance of legitimacy. VirusTotal analysis reveals that 12 out of 95 security vendors flag this domain for malicious activity, specifically related to crypto draining behaviors. These indicators, combined with the domain's active status and use of reputable infrastructure services, contribute to its elevated risk classification.

To mitigate the risk posed by en-us-wallet.pages.dev, users should avoid clicking on links or submitting any credentials or wallet information to this domain. It is recommended to use hardware wallets or secure wallet applications with strong authentication to protect assets. Network defenders should consider blocking the associated IP 172.66.46.247 and monitor for any attempts to access this domain within organizational networks. Continuous vigilance and user education on the nature of crypto drainers are critical components to prevent potential losses from this threat.