# maga-mem-pages-dev.pages.dev — SUSPICIOUS > Beware: maga-mem-pages-dev.pages.dev hosts a cryptocurrency drainer impersonating political content. Verify now on PhishDestroy — domain flagged by 0 of 95. ## Summary PhishDestroy identifies maga-mem-pages-dev.pages.dev as an active cryptocurrency drainer impersonating political memorabilia, currently under investigation with a status marked as active. This domain leverages Cloudflare Pages to host a fraudulent scheme designed to siphon cryptocurrency from unsuspecting victims by masquerading as legitimate political content pages. This domain was flagged by 0 of 95 VirusTotal vendors, indicating a lack of immediate detection despite its malicious intent. Registered through Cloudflare, Inc., it resolves to IP 172.66.44.108 and operates under an SSL certificate issued by Google Trust Services. The infrastructure's trustworthiness is further compromised by its association with known malicious activities, compounded by the absence of detections across multiple security platforms. While the precise creation date remains unverified, the domain's active status suggests recent deployment or ongoing malicious operations. The active status of this domain necessitates immediate caution from users, particularly those engaging with political content or cryptocurrency transactions. PhishDestroy recommends blocking access to this domain and verifying any cryptocurrency-related links or transactions through trusted platforms. Additionally, users should report this domain to their security teams or relevant authorities to prevent further exploitation. Enhanced monitoring of network traffic for connections to IP 172.66.44.108 is advised to mitigate potential risks. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 172.66.44.108 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/1d7a61eb-9c3a-41e9-b4b3-a0ad60241dec - PhishDestroy: https://phishdestroy.io/domain/maga-mem-pages-dev.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/maga-mem-pages-dev.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/maga-mem-pages-dev.pages.dev/ Last updated: 2026-03-28