mint-ator[.]pages[.]dev

mint-ator.pages.dev is an active crypto-draining domain posing as a legitimate financial service. Upon visiting, the site attempts to deceive users into connecting crypto wallets and then silently drains token balances via malicious smart-contract interactions. The domain leverages Cloudflare Pages hosting to appear professional and uses a Google Trust Services SSL certificate to further its legitimacy facade. Users should treat any connection prompt or wallet interaction as high risk, as the infrastructure is explicitly designed to siphon digital assets without consent or recovery options. This domain was flagged by 3 of 95 VirusTotal security vendors, is registered through Cloudflare, Inc., and appears on 1 public blocklist maintained by ScamSniffer. The page resolves to IP 172.66.47.177, which is part of Cloudflare’s edge network and hosts multiple fraudulent endpoints under Pages.dev subdomains. The current configuration shows no legitimate use case and aligns with known patterns observed in crypto-drain campaigns targeting DeFi users. If you visited mint-ator.pages.dev or connected a wallet, immediately revoke all unauthorized smart-contract interactions using tools like Revoke.cash or Rabby Wallet’s security dashboard. Disconnect the affected wallet from all dApps and consider transferring remaining assets to a clean, hardware-backed wallet. Monitor on-chain activity closely and report suspicious transactions to your wallet provider and relevant blockchain explorers.