# evmwallethealth.pages.dev — SUSPICIOUS

> evmwallethealth.pages.dev hosts an active crypto drainer targeting EVM wallets. Only 1/95 VirusTotal engines detected this threat.

## Summary
evmwallethealth.pages.dev is a confirmed crypto drainer site designed to steal funds from EVM-compatible wallets. Victims unwittingly approve malicious transactions via deceptive prompts, draining assets silently.

This domain was flagged by VirusTotal with 1/95 security vendors detecting the threat. It resolves to IP 188.114.97.3, registered through Cloudflare on an unverified date. The use of Google Trust Services SSL lends false legitimacy.

If you visited this site, immediately revoke any wallet permissions via blockchain explorers like Etherscan. Transfer remaining assets to a new, secure wallet and review transaction history for unauthorized transfers.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/1d9d0dff-0c1d-462c-8ff2-1f762bcfa17b
- PhishDestroy: https://phishdestroy.io/domain/evmwallethealth.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/evmwallethealth.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/evmwallethealth.pages.dev/
Last updated: 2026-03-21