# alterescrow.pages.dev — SUSPICIOUS

> alterescrow.pages.dev is a crypto drainer impersonating Escrow services. VirusTotal 0/95 detections. Verify safety on PhishDestroy before interacting.

## Summary
alterescrow.pages.dev has been flagged as a crypto drainer designed to steal cryptocurrency funds by tricking users into connecting their wallets. This domain mimics legitimate escrow services to deceive visitors into approving fraudulent transactions. The threat is particularly dangerous for users in the crypto space, as drainers often operate undetected until funds are drained. PhishDestroy identifies this as an active crypto drainer with a high risk of financial theft if users interact with it.  

 This domain resolves to IP 172.66.45.20 and is registered through Cloudflare, Inc. The SSL certificate is issued by Let’s Encrypt, which does not inherently validate the site’s legitimacy. VirusTotal currently shows 0/95 detections, meaning no security vendors have flagged it yet, but this does not guarantee safety. The domain is hosted on Cloudflare Pages, a legitimate service, but threat actors frequently abuse such platforms for phishing and malware campaigns. The lack of immediate detections highlights the importance of proactive verification before engaging with unfamiliar domains.  

 If you visited alterescrow.pages.dev, disconnect your wallet immediately and revoke any unauthorized permissions using tools like revoke.cash or wallet-specific settings. Do not approve any transactions or enter sensitive information. Report the domain to PhishDestroy for further analysis. Use trusted bookmarks or direct URLs for escrow services, and enable wallet transaction alerts to detect suspicious activity early. Stay vigilant—crypto drainers evolve rapidly, and only verified platforms should handle transactions.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.45.20

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/7443eb08-9787-4443-a4a9-68c9d5192cdc
- PhishDestroy: https://phishdestroy.io/domain/alterescrow.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/alterescrow.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/alterescrow.pages.dev/
Last updated: 2026-03-23