swiftmultiwallets[.]pages[.]dev

PhishDestroy identifies swiftmultiwallets.pages.dev as an active crypto drainer domain, posing as a multi-crypto wallet service.

This domain is currently under investigation for its suspected role in cryptocurrency theft, specifically functioning as a crypto drainer. PhishDestroy's analysis shows it was registered through Cloudflare, Inc. and resolves to IP address 188.114.97.3. The domain is secured with a Let's Encrypt SSL certificate. VirusTotal currently reports 0 detections out of 95 scanning vendors, indicating it has not yet been widely flagged despite its malicious behavior being actively monitored.

Given the domain's active status and its specific threat as a crypto drainer, users are strongly advised to avoid any interaction with swiftmultiwallets.pages.dev, particularly wallet connection requests or transaction approvals. The lack of detections on VirusTotal highlights the importance of proactive security measures, as automated scanners may not yet recognize the threat. Organizations should block this domain at the network level and educate users about the risks of unauthorized wallet connections. Immediate reporting to security teams or relevant cybercrime units is recommended if exposure or compromise is suspected.