app-destranetwork[.]pages[.]dev

PhishDestroy identifies app-destranetwork.pages.dev as a crypto drainer phishing domain currently under active investigation for generic phishing activities. This domain impersonates a legitimate service platform, leveraging cloud hosting and SSL infrastructure to deceive users into connecting cryptocurrency wallets or submitting credentials. The threat actor appears to be distributing a drainer script designed to silently siphon digital assets from unsuspecting victims under the guise of a legitimate transaction or login portal.

This domain exhibits several concerning technical indicators. VirusTotal currently reports zero detections out of 95 scanners, indicating a fresh or evasive deployment. The domain was registered through Cloudflare, Inc., resolving to IP 188.114.97.3 with a valid Google Trust Services SSL certificate. Notably, the SSL issuer’s reputation has not yet triggered a block on Google Safe Browsing (GSB), and historical data suggests recent creation aligned with phishing campaign timing.

As of this advisory, app-destranetwork.pages.dev remains in an active state with a risk level classified as under_investigation. Immediate defensive actions include proactive DNS blocking and user education regarding verification via PhishDestroy. While current detections are low, the use of reputable infrastructure and absence of GSB flags suggest this threat may escalate rapidly. Users are urged to avoid interaction and report any encounters to PhishDestroy for rapid ingestion and dissemination across security controls.