# insidergroup.pages.dev — SUSPICIOUS

> insidergroup.pages.dev is a live crypto drainer impersonating Cloudflare infrastructure. Flagged by 0 of 95 VirusTotal vendors. Remove immediately.

## Summary
PhishDestroy identifies insidergroup.pages.dev as an active crypto drainer campaign leveraging Cloudflare Workers pages to deceive visitors into connecting cryptocurrency wallets and approve malicious token transfers.

This domain was flagged by 0 of 95 VirusTotal vendors as of latest scan, is registered through Cloudflare, Inc., and resolves to IP address 172.66.47.178 assigned to the Cloudflare network range. Google Trust Services issued the SSL certificate for insidergroup.pages.dev as part of the default *.pages.dev wildcard certificate policy, which increases credibility with potential victims unaware of the malicious origin.

The domain remains active and carries high risk due to its use of legitimate Cloudflare infrastructure, zero VirusTotal detections, and lack of inclusion on public blocklists. Users and organizations are advised to block traffic to insidergroup.pages.dev at DNS and network levels, scan endpoints for unauthorized wallet connections, and report the domain to Cloudflare Abuse and relevant threat intelligence platforms to prevent further exploitation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.178

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/insidergroup.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/insidergroup.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/insidergroup.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/insidergroup.pages.dev/
Last updated: 2026-04-04