# ethereum-fair.pages.dev — SUSPICIOUS

> ethereum-fair.pages.dev operates as a crypto drainer with 0/95 VirusTotal detections. This Cloudflare-hosted domain mimics Ethereum Fair to steal digital assets.

## Summary
PhishDestroy identifies ethereum-fair.pages.dev as an active crypto drainer campaign targeting cryptocurrency users.  This domain was flagged by Cloudflare Pages and resolves to IP 188.114.96.3 with a Google Trust Services SSL certificate. VirusTotal shows 0 detections out of 95 scanners at the time of investigation. The campaign uses the unique seed b4e045 and mimics the Ethereum Fair brand to deceive visitors.  If you visited this domain, disconnect any connected wallets immediately. Do not approve suspicious transactions or enter private keys. If funds were stolen, report the incident to your wallet provider and local cybercrime units. Use updated ad-blockers and avoid clicking unknown links to prevent further exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b96648fa-39e9-4a63-ac6e-7959bce4ab1b
- PhishDestroy: https://phishdestroy.io/domain/ethereum-fair.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ethereum-fair.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ethereum-fair.pages.dev/
Last updated: 2026-03-31