# deim2.pages.dev — SUSPICIOUS

> deim2.pages.dev is under investigation for potential phishing activity. Exercise caution and avoid sharing personal info on this domain.

## Summary
PhishDestroy identifies deim2.pages.dev as a domain under investigation for generic phishing activity. The risk level remains uncertain pending further analysis.

Although VirusTotal shows no detections for this domain, its registration via Cloudflare and hosting at IP 172.66.44.134 align with common tactics used in phishing setups. The domain's activity and infrastructure warrant close scrutiny.

Users should avoid interacting with deim2.pages.dev until more conclusive findings emerge. PhishDestroy continues to monitor this domain to provide timely updates on its status and associated risks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: CryptoWealth | 您的私人加密资产管家

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.44.134
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: clayton.ns.cloudflare.com jade.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf47-7583-71c7-b513-43ca81e54b44.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/deim2.pages.dev
- Wayback Machine: https://web.archive.org/web/https://deim2.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/deim2.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/deim2.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/deim2.pages.dev/
Last updated: 2026-03-19