fixwebrectification[.]pages[.]dev

PhishDestroy has identified fixwebrectification.pages.dev as a generic phishing domain specifically designed as a crypto drainer, impersonating a decentralized dapp to trick users into connecting their wallets and approving malicious transactions. The domain was registered on April 18, 2026, through Cloudflare, Inc., and its SSL certificate was issued by Google Trust Services / WE1, lending it a false sense of legitimacy. Despite being offline at the time of analysis, the threat it posed was significant, as it targeted cryptocurrency holders seeking to interact with decentralized applications.

Technical indicators for this domain include a VirusTotal score of 0 out of 95 detections, meaning it had not been flagged by any security vendors at the time of analysis. The domain resolves to IP address 188.114.96.3 and is hosted on Cloudflare infrastructure. It has already appeared on 2 security blocklists, indicating that some threat intelligence sources have identified it as malicious. The page title was "Decentralized Dapp," which directly appeals to users of blockchain platforms. Notably, it is not listed on Google Safe Browsing (GSB) as a threat, which may delay detection for some users.

Currently, the domain is offline, suggesting that either the hosting provider or the registrar has taken action to suspend it. However, the risk remains that the operators could deploy similar domains under different names or subdomains. Users who may have interacted with this site should immediately revoke any token approvals granted to the domain and ensure their wallet software is secure. PhishDestroy recommends monitoring for similar domains and avoiding unsolicited links to dapps, especially those with newly registered domains. Regular use of security tools and staying informed about common phishing tactics can help prevent future losses.