# evmchecker.pages.dev — SUSPICIOUS

> PhishDestroy warns: evmchecker.pages.dev hosts a crypto drainer mimicking Ethereum tools, spotted by SOC with 0/95 VT score. Verify before interacting.

## Summary
PhishDestroy identifies the domain evmchecker.pages.dev as a generic phishing page suspected of distributing a cryptocurrency drainer kit targeting Ethereum users.

Technical analysis reveals this domain resolves to IP 188.114.97.3 via Cloudflare, Inc., with Google Trust Services providing the SSL certificate. VirusTotal currently flags the domain with 0/95 detections, while no blocklist entries have been recorded at this time. The domain remains under investigation due to the absence of detections despite behavioral indicators.

The domain shows active status with no current remediation efforts, leaving users vulnerable to potential credential or wallet theft. Users are advised to avoid interaction and verify legitimacy through PhishDestroy before engaging with similar domains.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6f512860-8314-4a13-b875-84a1e3f6ccac
- PhishDestroy: https://phishdestroy.io/domain/evmchecker.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/evmchecker.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/evmchecker.pages.dev/
Last updated: 2026-03-22