aigentx-xyz-migration[.]pages[.]dev

PhishDestroy identifies aigentx-xyz-migration.pages.dev as an active crypto drainer scam site under investigation for malicious activity. This domain is designed to trick users into connecting cryptocurrency wallets under the guise of a platform migration, with the intent to drain assets. The threat is classified as a generic phishing attack with high risk potential due to its active status and evasion techniques.

This domain was flagged through automated threat intelligence pipelines and exhibits several suspicious technical indicators. It is registered via Cloudflare, Inc., a common choice for malicious actors seeking anonymity and rapid domain rotation. The SSL certificate is issued by Google Trust Services, which may lend false legitimacy to the site. The domain resolves to IP address 188.114.97.3, which is associated with Cloudflare’s edge network and has been observed hosting multiple phishing campaigns. Notably, VirusTotal currently reports 0 detections out of 95 security engines, indicating this threat has not yet been widely recognized by mainstream scanners. The unique seed identifier 84c59f confirms this entry in PhishDestroy’s proprietary tracking system.

Users should immediately avoid interacting with aigentx-xyz-migration.pages.dev and treat it as a confirmed high-risk threat. To protect cryptocurrency holdings, never connect wallets to unknown websites, especially those claiming to offer platform migrations or token swaps. Always verify URLs using PhishDestroy’s real-time database before entering any sensitive information. If you have already visited the site, disconnect your wallet immediately, revoke any unintended permissions via your wallet interface, and consider transferring remaining assets to a clean wallet. Report this domain to your wallet provider and relevant blockchain security teams to help prevent further victimization.