# algebra-frontend.pages.dev — SUSPICIOUS

> algebra-frontend.pages.dev hosts a suspected crypto drainer phishing site with 0/95 detections on VirusTotal.

## Summary
PhishDestroy identifies algebra-frontend.pages.dev as a malicious domain engaged in crypto drainer phishing activity. The site leverages Cloudflare’s infrastructure and a Google Trust Services SSL certificate to masquerade as a legitimate financial or cryptocurrency service, tricking users into connecting their wallets or entering sensitive credentials. This tactic is increasingly prevalent as threat actors exploit trusted hosting providers to bypass traditional security filters. The domain resolves to IP address 188.114.97.3, a Cloudflare-managed endpoint commonly abused for phishing campaigns due to its low-barrier anonymity and rapid provisioning capabilities.


This domain currently evades detection with 0 detections out of 95 engines on VirusTotal as of the latest scan. It was registered through Cloudflare, Inc. and operates under a valid Google Trust Services SSL certificate, which may enhance its credibility in phishing lures. While the creation date is not explicitly provided in available telemetry, the domain’s association with an active phishing page indicates recent deployment. Its presence highlights the limitations of signature-based detection against novel or low-prevalence threats. Security teams should flag this IP (188.114.97.3) and monitor outbound traffic to *.pages.dev for signs of compromise.


Users who visited algebra-frontend.pages.dev or engaged with its content should assume their cryptocurrency wallets, private keys, or account credentials may have been compromised. Immediately disconnect any connected wallets using a clean device, revoke any unauthorized smart contract approvals via tools like Revoke.cash or Etherscan, and transfer remaining assets to a new, segregated wallet. Scan all connected devices for malware using reputable endpoint protection software. Report the incident to relevant exchanges, wallet providers, and local cybercrime units. Avoid future access to this domain entirely. If you suspect asset loss, file a complaint with your local financial cybercrime unit and contact your wallet provider for recovery assistance.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/79bf528f-97f0-4343-b4dd-977a8b178867
- PhishDestroy: https://phishdestroy.io/domain/algebra-frontend.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/algebra-frontend.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/algebra-frontend.pages.dev/
Last updated: 2026-03-28