# e-ng-suit-us.pages.dev — SUSPICIOUS

> PhishDestroy flags e-ng-suit-us.pages.dev as a live crypto drainer pretending to be a suit web app. VT shows 0/95 detections; verify before you click.

## Summary
PhishDestroy identifies e-ng-suit-us.pages.dev as an active cryptocurrency drainer posing under the guise of a “suit” web application. The risk level is under investigation but the page is live and interacting with user wallets. This type of site presents a high risk of unauthorized token transfers and fund loss, especially to visitors who approve wallet connections.

This domain was flagged via seed 9eed92. Intelligence collected on 2024-06-12 shows it resolves to 172.66.44.185, is registered through Cloudflare, Inc., and carries a Google Trust Services SSL certificate. At the time of analysis, VirusTotal records 0 detections out of 95 scanners, indicating no AV coverage yet despite active distribution. No blocklist entries were found; age and hosting metadata suggest rapid turn-up for malicious purposes.

To mitigate drainer risk, users should avoid wallet connections to unknown “.pages.dev” sites, verify URLs on PhishDestroy before clicking, and revoke suspicious approvals via wallet interfaces such as Etherscan’s Token Approval Checker or similar blockchain explorers. Always use hardware wallets or isolated accounts when testing unfamiliar web apps.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.185

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f1b32d5b-6931-4efc-b5ec-fe0ae994dc0e
- PhishDestroy: https://phishdestroy.io/domain/e-ng-suit-us.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/e-ng-suit-us.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/e-ng-suit-us.pages.dev/
Last updated: 2026-03-22