potentialactivist[.]pages[.]dev

PhishDestroy identifies potentialactivist.pages.dev as an active crypto drainer scam under investigation. The domain abuses Cloudflare Pages hosting to impersonate legitimate activist platforms, luring users into connecting crypto wallets for unauthorized fund transfers. This represents a high-risk credential theft threat targeting cryptocurrency holders through false donation portals. This domain was flagged with 0 detections across 95 VirusTotal scanners, registered through Cloudflare's Pages service on unknown date, resolving to IP 172.66.44.80 via Google Trust Services SSL. The complete lack of detection despite active investigation suggests advanced evasion techniques or a newly deployed threat. With 1/95 detection rate, this crypto drainer remains operational while bypassing traditional security measures. The combination of Cloudflare hosting and HTTPS certificate creates initial trust signals that mask malicious intent until wallet connection triggers the drainer payload. To mitigate crypto drainer risks: never connect wallets to unknown activist sites, verify URLs through official channels, and use hardware wallet isolation for suspicious interactions. Immediate browser cache clearing is advised if any wallet connection occurred. Report this domain to Cloudflare Abuse (abuse.cloudflare.com) and your crypto wallet provider while avoiding all future interactions with potentialactivist.pages.dev.