# fxweb-www.pages.dev — SUSPICIOUS

> fxweb-www.pages.dev hosts a crypto drainer mimicking a cryptocurrency exchange. Verify the site on PhishDestroy before entering credentials — IP 188.114.96.

## Summary
PhishDestroy has flagged fxweb-www.pages.dev as hosting an active crypto drainer designed to siphon cryptocurrency from unsuspecting victims. This domain represents a high-impact threat given its current status and limited detection coverage.  

This domain resolves to IP address 188.114.96.3 and is registered through Cloudflare, Inc. The site operates under a Google Trust Services SSL certificate, which may lend a false sense of legitimacy. As of the latest scan, VirusTotal reports zero detections out of 95 scanning engines, indicating this threat is currently undetected by the majority of automated security tools. The domain is actively resolving and has not yet been listed on major threat intelligence platforms, including any blocklists or reputation services.  

Users should avoid accessing this domain or interacting with any cryptocurrency-related prompts on the site, as it likely employs sophisticated social engineering tactics to deceive users into connecting wallets or entering seed phrases. If you have recently visited this site or entered any credentials, immediately revoke wallet connections, transfer funds to a cold wallet, and scan your device using PhishDestroy. Cloud providers hosting similar services (e.g., Pages.dev) should be notified immediately to take down this malicious content. Always verify URLs and use hardware wallet verification when interacting with crypto platforms.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/909ba2bf-a78f-4c38-a690-d442a8c4d064
- PhishDestroy: https://phishdestroy.io/domain/fxweb-www.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/fxweb-www.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/fxweb-www.pages.dev/
Last updated: 2026-03-26