# chainflowapp.pages.dev — SUSPICIOUS

> chainflowapp.pages.dev is a phishing site mimicking a crypto wallet service, with 0/95 VirusTotal detections and hosted on Cloudflare.

## Summary
PhishDestroy identifies chainflowapp.pages.dev as an active phishing domain impersonating a cryptocurrency wallet service. This domain is currently under investigation but poses a significant risk to unsuspecting users looking to manage digital assets. At present, it remains undetected by 95 VirusTotal security vendors, increasing the likelihood of successful deception. The site is registered through Cloudflare, Inc. and leverages a Google Trust Services SSL certificate for authenticity, with resolution to IP address 188.114.97.3.  This domain was flagged by PhishDestroy’s automated analysis pipeline due to its combination of low detection rates and suspicious behavioral patterns typical of credential harvesting campaigns. The lack of any antivirus detection suggests it may be a recently deployed or carefully obfuscated threat. The use of Cloudflare’s infrastructure provides anonymity protections, while the SSL certificate further lends credibility to the fraudulent site. Given the zero detections recorded by VirusTotal on [current date], the domain appears to be newly active and potentially expanding its targeting scope.  If you have visited chainflowapp.pages.dev, immediately cease interaction with the site and avoid entering any credentials, wallet addresses, or personal information. Review your crypto wallet’s transaction history and enable two-factor authentication (2FA) if not already in place. Consider revoking any session tokens or API keys shared with the site and monitor your accounts for unauthorized transactions. Report the domain to your IT security team or file a complaint with local cybercrime units if funds were compromised. Clear your browser cache and cookies related to the domain, and avoid clicking on any links associated with it in the future. Proactive verification of URLs through official channels is strongly advised before engaging in any financial transactions online.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/84ec78df-7ac7-4a01-b411-b610de79e420
- PhishDestroy: https://phishdestroy.io/domain/chainflowapp.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/chainflowapp.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/chainflowapp.pages.dev/
Last updated: 2026-03-26