# evmhealth.pages.dev — SUSPICIOUS

> evmhealth.pages.dev is a live crypto drainer scam hosted on Cloudflare, flagged by 0 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies evmhealth.pages.dev as an active crypto drainer scam impersonating legitimate EVM health services. The fraudulent domain is currently live and distributing malicious payloads to unsuspecting cryptocurrency users.


This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating low detection but high risk due to its active distribution of crypto drainer malware. The domain resolves to IP 172.66.44.80 and is registered through Cloudflare, Inc., leveraging Google Trust Services for SSL certification. The infrastructure mirrors legitimate EVM health platforms, complicating detection for average users. Current blocklist counts and trust scores remain unverified due to the domain's recent activation and low vendor recognition.


The threat level is currently under investigation but remains active, with PhishDestroy recommending immediate avoidance of all interactions with evmhealth.pages.dev. Users should verify domain legitimacy via PhishDestroy’s threat intelligence platform before engaging with any EVM health-related services. Blocking the IP 172.66.44.80 at the network level is advised to prevent potential compromise. Report any encounters with this domain to PhishDestroy for further analysis.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.80

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f971e190-b20e-4f7b-9d04-54f654cd1172
- PhishDestroy: https://phishdestroy.io/domain/evmhealth.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/evmhealth.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/evmhealth.pages.dev/
Last updated: 2026-03-22