vestyydev[.]pages[.]dev

PhishDestroy identifies vestyydev.pages.dev as an active crypto drainer phishing domain hosted on Cloudflare Pages. This site impersonates legitimate services to trick users into connecting crypto wallets, then silently drains funds via malicious smart contracts. The threat is classified as a high-risk generic phishing operation due to its active status and weaponized infrastructure.

This domain resolves to IP 172.66.45.45 under Cloudflare’s Pages service, secured with a Let’s Encrypt SSL certificate. PhishDestroy’s analysis shows 0 detections on VirusTotal out of 95 scanners, indicating it remains under the radar of most antivirus engines. The domain was registered through Cloudflare, Inc. and is currently active, with no public blocklist entries as of the latest scan. This low detection rate combined with Cloudflare’s abuse-resistant hosting makes it particularly dangerous for users who rely on traditional security tools.

If you visited vestyydev.pages.dev or entered any information, disconnect your wallet immediately and revoke any unauthorized permissions via blockchain explorers like Etherscan or Solscan. Do not interact with any further prompts or wallet connections from this domain. Report the incident to PhishDestroy and consider rotating wallet keys if suspicious transactions occurred. Always verify URLs through PhishDestroy’s lookup tool before engaging with crypto platforms.