us-abraxas--wallet[.]pages[.]dev

The domain us-abraxas--wallet.pages.dev is a phishing site designed to function as a crypto drainer, a type of scam that automatically siphons cryptocurrency from connected wallets without user consent. It does not impersonate a known brand or utilize a publicly identified drainer kit. As of the latest verification, the site has been taken offline, though prior activity remains a risk to victims who interacted with it.

Technical indicators confirm the elevated risk level. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and LevelBlue, while appearing on 1 security blocklist (PhishDestroy). Registered through Cloudflare, Inc. on September 25, 2025, it resolved to the IP address 188.114.96.3, hosted by Cloudflare in Canada. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'Abraxas Wallet – Kompakte Lösung für Krypto und DeFi'. Technologies detected include HSTS, Cloudflare, and HTTP/3, with a Gridinsoft trust score of 0/100. Google Safe Browsing did not flag the domain at the time of assessment.

Individuals who connected a wallet to us-abraxas--wallet.pages.dev should immediately revoke all token approvals using a tool like revoke.cash or Etherscan's token approval checker. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Report the domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts. If credentials were entered, change passwords on all associated accounts and enable two-factor authentication where available.