# halloweenworld.pages.dev — SUSPICIOUS

> PhishDestroy identifies halloweenworld.pages.dev as a fake login page impersonating crypto platforms. Flagged by 0 of 95 VirusTotal vendors—verify now on.

## Summary
PhishDestroy has identified halloweenworld.pages.dev as an active crypto drainer phishing domain currently under investigation. The page is designed to impersonate legitimate login portals, with the intent to steal cryptocurrency wallet credentials and initiate unauthorized transactions. Users accessing this domain risk asset loss, as the threat actor leverages deceptive branding to establish credibility and bypass user skepticism.  

This domain was flagged by 0 of 95 VirusTotal vendors at the time of analysis, indicating it remains undetected by most scanners. Registered through Cloudflare, Inc., the domain resolves to IP address 172.66.47.113 and utilizes a Google Trust Services SSL certificate for added legitimacy. The domain’s infrastructure suggests a high level of obfuscation, with Cloudflare’s proxy services potentially masking the true origin and intent behind the page.  

As of this report, the threat remains active, and no blocklists have been applied to halloweenworld.pages.dev. Users are strongly advised to avoid interacting with this domain entirely. For verification and protection, PhishDestroy recommends scanning any suspicious links using its real-time threat intelligence platform. Immediate reporting to PhishDestroy via the ‘Report Phish’ browser extension or website will help update detection signatures and protect the broader community from this drainer campaign.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.113

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/fa08f34f-19bd-43fc-a118-25fa9ccef4f2
- PhishDestroy: https://phishdestroy.io/domain/halloweenworld.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/halloweenworld.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/halloweenworld.pages.dev/
Last updated: 2026-03-22