# r982820.pages.dev — SUSPICIOUS

> PhishDestroy flags r982820.pages.dev as a crypto-draining fake login site. It shows 0/95 VirusTotal detections as of seed d5c94f. Avoid this domain now.

## Summary
PhishDestroy identifies r982820.pages.dev as an active fake-login site designed to trick visitors into entering cryptocurrency wallet credentials. The page impersonates legitimate services to drain digital assets once login details are submitted.

This domain was flagged with a generic phishing risk level and is currently under investigation by PhishDestroy. It resolves to IP 172.66.47.100, is registered through Cloudflare, Inc., and holds an SSL certificate issued by Google Trust Services. VirusTotal currently reports 0 out of 95 antivirus engines detecting the threat, indicating it remains under the radar of many security scanners.

If you visited r982820.pages.dev, disconnect any wallets immediately, revoke any permissions granted, and scan your device with updated antivirus software. Report the domain on PhishDestroy to help block it for others.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.100

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/95348136-5a28-4702-8d49-84108b238431
- PhishDestroy: https://phishdestroy.io/domain/r982820.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/r982820.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/r982820.pages.dev/
Last updated: 2026-03-30