# exchange-d6g.pages.dev — SUSPICIOUS > exchange-d6g.pages.dev is a crypto drainer under investigation. Flagged by 0 of 95 VirusTotal vendors. SSL by Google Trust Services. Secure your assets now. ## Summary PhishDestroy identifies exchange-d6g.pages.dev as an active crypto drainer posing as a legitimate service. The domain is currently under investigation by security teams due to its association with cryptocurrency theft tactics. Users are advised to exercise caution when encountering this domain. This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely recognized as malicious. Registered through Cloudflare, Inc., the domain resolves to IP 172.66.45.36 and operates under a Google Trust Services SSL certificate. The current risk level remains under_investigation, with no blocklist entries or trust score reductions detected at this time. Given the domain's active status and the lack of detections, organizations and individuals should consider blocking exchange-d6g.pages.dev at the network perimeter. Monitor for any associations with cryptocurrency transactions or credential entry prompts. Users who may have interacted with this domain should revoke any exposed credentials and review their wallet or account activity for unauthorized transactions. Immediate action is recommended to mitigate potential financial losses. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 172.66.45.36 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/7a056482-082a-49bf-bfc0-39e1991fb469 - PhishDestroy: https://phishdestroy.io/domain/exchange-d6g.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/exchange-d6g.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/exchange-d6g.pages.dev/ Last updated: 2026-04-01