# exe-trust-wellex-web-en-access.pages.dev — SUSPICIOUS

> exe-trust-wellex-web-en-access.pages.dev is a crypto drainer phishing site flagged by 3/95 VirusTotal vendors.

## Summary
PhishDestroy identifies the domain exe-trust-wellex-web-en-access.pages.dev as an ACTIVE crypto drainer phishing page. This subdomain mimics a legitimate service, likely targeting users through deceptive URLs to trick them into connecting cryptocurrency wallets. No specific drainer kit (e.g., Inferno, AngelDrainer, or Snatch) has been confirmed, but the distribution method suggests direct wallet connection manipulation, typical of crypto drainers attempting to siphon digital assets under false pretenses.

Technical analysis reveals this domain resolves to IP 188.114.96.3 and was registered via Cloudflare, Inc. VirusTotal flags this domain with a 3/95 detection rate, indicating limited but notable malicious recognition among security vendors. The domain utilizes a Google Trust Services SSL certificate, suggesting attempted legitimacy through HTTPS encryption. Notably, this domain is hosted on Cloudflare Pages, a legitimate service often abused for phishing campaigns due to its fast deployment and anonymity features. Despite the SSL certificate, the low VT score and lack of widespread blocklist entries suggest either a newly activated threat or one designed to evade initial detection.

Current status shows the domain remains ACTIVE and unresolved, posing an elevated risk to users who may interact with it. As of now, no widespread blocklist entries or major takedown actions have been recorded, leaving a window for continued abuse. Immediate actions include blocking the domain and IP at the network level, reporting to security vendors and threat intelligence platforms, and advising users to avoid accessing the domain or entering any wallet credentials. Remaining risk is high due to active status, limited vendor detection, and potential for new drainer activity under similar domains. Users are strongly encouraged to verify URLs through trusted sources before any cryptocurrency-related interaction.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/30814d96-fce6-4b26-86bd-25f87d7a3028
- PhishDestroy: https://phishdestroy.io/domain/exe-trust-wellex-web-en-access.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/exe-trust-wellex-web-en-access.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/exe-trust-wellex-web-en-access.pages.dev/
Last updated: 2026-03-22