en-phant-omsols[.]pages[.]dev

PhishDestroy identifies en-phant-omsols.pages.dev as a live crypto-draining phishing page hosted on Cloudflare Pages. The site is designed to trick cryptocurrency users into connecting their wallets and silently transferring funds to attacker-controlled addresses. Once a victim approves a wallet connection or signs a malicious transaction, the drainer immediately siphons tokens and NFTs to external wallets controlled by the criminals behind this campaign. Security analysts note that the page mimics legitimate crypto-service interfaces, often inserting fake balance updates and transaction confirmations to delay detection and increase the chances of success. This domain was flagged on Cloudflare Pages and resolves to IP 172.66.47.42. VirusTotal currently shows 5 out of 95 security engines detecting the page, indicating it remains under the radar. The SSL certificate is issued by Google Trust Services, which adds superficial legitimacy but does not guarantee safety. While the exact creation date is not publicly disclosed, the domain’s registration metadata indicates recent deployment, consistent with fast-moving phishing campaigns targeting crypto communities. If you visited en-phant-omsols.pages.dev or entered any wallet credentials, immediately disconnect your wallet and revoke any connected permissions through your wallet’s security settings or official app. Do not approve unknown transactions. Transfer any remaining assets to a new, isolated wallet with a fresh seed phrase. Report the incident to your wallet provider and consider filing a complaint with relevant cybercrime units. Stay vigilant: always verify URLs, use hardware wallets for large holdings, and enable transaction simulation tools where available.