satlayeairdrop[.]pages[.]dev

The domain satlayeairdrop.pages.dev was a crypto drainer phishing site designed to steal cryptocurrency from victims by draining wallet funds. It did not impersonate a specific brand and no known drainer kit was identified. The site is currently taken offline, but it previously posed an elevated risk to users who connected wallets expecting a blockchain airdrop.

Technical indicators show satlayeairdrop.pages.dev was flagged by 1 of 95 VirusTotal security vendors, including Trustwave. The domain was registered through Cloudflare, Inc. on August 22, 2025, and resolved to the IP address 172.66.45.26, hosted by Cloudflare in the US. It appeared on 1 security blocklist (PhishDestroy) and had no SSL certificate. The observed page title was 'Blockchain Dapps'. Google Safe Browsing did not flag the domain at the time of analysis.

Users who interacted with satlayeairdrop.pages.dev should immediately revoke all token approvals for connected wallets using a tool like revoke.cash. Funds should be moved to a new, secure wallet to prevent further unauthorized transactions. Victims are advised to monitor wallet activity for signs of compromise and report the phishing domain to platforms like Google Safe Browsing, PhishTank, or their wallet provider for further action.