# fag-trust-ou-buy.pages.dev — MALICIOUS

> PhishDestroy identifies fag-trust-ou-buy.pages.dev as an active crypto drainer domain flagged by 8 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies the domain fag-trust-ou-buy.pages.dev as hosting an active crypto drainer campaign. The infrastructure is currently operational and poses an elevated risk to cryptocurrency users who may encounter deceptive links or spoofed assets. Credential submissions or wallet connections on this domain could result in direct asset theft through malicious JavaScript payloads and social engineering tactics.

This domain was flagged by 8 of 95 VirusTotal vendors and resolves to IP address 188.114.97.3. It is registered through Cloudflare, Inc., with an SSL certificate issued by Google Trust Services. The domain utilizes Cloudflare Pages infrastructure to host malicious content under a dynamic subdomain structure designed to evade detection. Current trust scores indicate a high-risk profile with minimal reputation across security platforms.

The campaign remains active as of latest analysis. Users are advised to block all traffic to this domain, avoid clicking links, and report encounters to their security team or relevant abuse channels. Organizations should consider updating firewall rules to include the IP address 188.114.97.3 and monitor for downstream compromise. This domain should be treated as a confirmed threat with no legitimate use case.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 8 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/57f806e4-5c59-4b37-807f-fb67743273bd
- PhishDestroy: https://phishdestroy.io/domain/fag-trust-ou-buy.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/fag-trust-ou-buy.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/fag-trust-ou-buy.pages.dev/
Last updated: 2026-03-22