# openoccean-swap-en-us.pages.dev — SUSPICIOUS

> openoccean-swap-en-us.pages.dev poses a crypto drainer threat. Resolves to IP 172.66.47.155. Verify safety status on PhishDestroy immediately.

## Summary
PhishDestroy identifies openoccean-swap-en-us.pages.dev as an active threat with a risk level currently under investigation. This domain is linked to a crypto drainer type of phishing attack, implying it attempts to illicitly obtain cryptocurrency wallets or related credentials through deceptive means.

Technical analysis shows this domain resolves to IP address 172.66.47.155 and is registered via Cloudflare, Inc. The domain holds an SSL certificate issued by Google Trust Services, which might mislead users due to the presence of valid HTTPS encryption. VirusTotal reports 0 out of 95 engines detect this domain as malicious, indicating it is not yet flagged by mainstream antivirus vendors. There is no publicly available creation date or blocklist information at this time. The domain is hosted on Google Pages infrastructure, which can lend perceived legitimacy but is abused here for phishing purposes.

Given the crypto drainer threat type, users should avoid interacting with any wallet connection requests or login forms presented by this domain. Precautionary steps include verifying wallet addresses and withdrawal requests directly through official platforms, refraining from inputting private keys or seed phrases, and regularly updating security solutions. Monitoring domain reputation tools and consulting PhishDestroy for real-time updates on this domain's status is also recommended to mitigate potential financial losses.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.155

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/openoccean-swap-en-us.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/openoccean-swap-en-us.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/openoccean-swap-en-us.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/openoccean-swap-en-us.pages.dev/
Last updated: 2026-04-09