# logn-trezx-eng.pages.dev — SUSPICIOUS > Learn if logn-trezx-eng.pages.dev is a crypto drainer phishing scam after 0 of 95 VirusTotal vendors flagged it. Verify safety now. ## Summary PhishDestroy identifies logn-trezx-eng.pages.dev as a generic phishing domain currently under active investigation. This site is suspected of engaging in crypto drainer activity, a high-risk threat category designed to steal cryptocurrency assets from unsuspecting users. The domain remains unblocked by standard security vendors despite ongoing scrutiny, indicating elevated risk potential for visitors. This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, showing minimal detection by automated security systems. It resolves to IP address 172.66.47.95, is registered through Cloudflare, Inc., and holds a valid SSL certificate issued by Google Trust Services. The domain's recent registration through Cloudflare's infrastructure raises additional concerns about evasion tactics, as threat actors frequently exploit legitimate hosting providers to obscure malicious operations. The current status of logn-trezx-eng.pages.dev remains active under investigation, meaning active monitoring is ongoing but no definitive classification has been established. Users should exercise extreme caution when accessing this domain, as the combination of zero VirusTotal detections, Cloudflare hosting, and suspected crypto drainer activity creates a high-risk scenario. PhishDestroy recommends immediate blocking of this domain at the network level and advises against any cryptocurrency-related transactions through this site. Organizations should update their threat intelligence feeds to include this indicator and deploy DNS filtering solutions to prevent access. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 172.66.47.95 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/6ace3410-d674-41f5-b149-56bc79a2976c - PhishDestroy: https://phishdestroy.io/domain/logn-trezx-eng.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/logn-trezx-eng.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/logn-trezx-eng.pages.dev/ Last updated: 2026-03-27