# dexcoreexplore.pages.dev — SUSPICIOUS > PhishDestroy identifies dexcoreexplore.pages.dev hosting a crypto drainer impersonating Explore. VT score: 0/95. Check the full report. ## Summary PhishDestroy identifies the domain dexcoreexplore.pages.dev as an active generic phishing page impersonating Explore services. This domain employs a crypto drainer kit designed to deceive users into connecting their wallets and approving malicious transactions, exposing victims to direct financial theft. The page is hosted on Cloudflare Pages, leveraging the legitimate Cloudflare Pages.dev subdomain to enhance credibility and evade initial detection. This domain resolves to IP address 172.66.47.155 and is secured with a Let’s Encrypt SSL certificate, increasing its perceived legitimacy. As of the latest scan, VirusTotal reports 0 out of 95 detection engines flagged this domain, indicating it remains under the radar. Registered through Cloudflare, Inc., the domain shows no signs of prior flagging on Google Safe Browsing (GSB) and is not currently listed on any major blocklists, further reducing early intervention opportunities. The domain remains active as of this assessment, with PhishDestroy’s investigation ongoing. Users are strongly advised to avoid interacting with this domain and report any encountered instances. While current risk is deemed under investigation, the absence of detections and blocklist entries suggests a need for heightened vigilance, particularly among users in the crypto and DeFi sectors. Blocking the domain and associated IP, alongside community reporting, is recommended to mitigate further exposure. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 172.66.47.155 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/c45728ef-64b1-4c02-b857-1bc585b1bcff - PhishDestroy: https://phishdestroy.io/domain/dexcoreexplore.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/dexcoreexplore.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/dexcoreexplore.pages.dev/ Last updated: 2026-03-30