exchange-d6g[.]pages[.]dev

PhishDestroy identifies exchange-d6g.pages.dev as an active crypto drainer posing as a legitimate service. The domain is currently under investigation by security teams due to its association with cryptocurrency theft tactics. Users are advised to exercise caution when encountering this domain.

This domain was flagged by 3 of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely recognized as malicious. Registered through Cloudflare, Inc., the domain resolves to IP 172.66.45.36 and operates under a Google Trust Services SSL certificate. The current risk level remains under_investigation, with no blocklist entries or trust score reductions detected at this time.

Given the domain's active status and the lack of detections, organizations and individuals should consider blocking exchange-d6g.pages.dev at the network perimeter. Monitor for any associations with cryptocurrency transactions or credential entry prompts. Users who may have interacted with this domain should revoke any exposed credentials and review their wallet or account activity for unauthorized transactions. Immediate action is recommended to mitigate potential financial losses.