# crop-6qi.pages.dev — SUSPICIOUS

> crop-6qi.pages.dev is a verified crypto drainer mimicking legitimate login portals. PhishDestroy flags it as active with 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies crop-6qi.pages.dev as a crypto drainer domain designed to trick users into connecting malicious cryptocurrency wallets or divulging private keys. This active threat mimics legitimate login interfaces to siphon digital assets, posing a direct risk to cryptocurrency investors and asset holders.


This domain was flagged by PhishDestroy after manual analysis revealed concerning patterns. VirusTotal currently reports 0 detections out of 95 scans, indicating evasion of automated detection tools. It was registered through Cloudflare, Inc., and has already appeared on 2 security blocklists. The site operates under an SSL certificate issued by Google Trust Services and resolves to the IP address 172.66.45.33, with proactive blocking by Enkrypt and ScamSniffer already in place.


If you visited crop-6qi.pages.dev, immediately disconnect your wallet from any connected applications and revoke unauthorized access through your wallet provider’s dashboard. Do not enter any credentials or wallet information on this site. Scan your device using reputable antivirus software and consider rotating wallet keys if suspicious activity is detected. Report the domain to PhishDestroy for further analysis and community protection.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.45.33

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["Enkrypt", "ScamSniffer"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9af3efdd-723c-46a9-a165-2eda9ff97fcc
- PhishDestroy: https://phishdestroy.io/domain/crop-6qi.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/crop-6qi.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/crop-6qi.pages.dev/
Last updated: 2026-03-22