# samevellay.pages.dev — SUSPICIOUS > samevellay.pages.dev — active crypto drainer phishing site with 0/95 VirusTotal detections. Avoid clicking links. Report now. ## Summary PhishDestroy identifies samevellay.pages.dev as an active crypto drainer phishing site hosted on Cloudflare Pages. This fraudulent page mimics legitimate services to trick users into connecting cryptocurrency wallets, enabling fund theft. The domain resolves to IP 172.66.44.167 and uses a Google Trust Services SSL certificate for added credibility. This domain was flagged using automated threat detection pipelines on September 12, 2024. Critical indicators include zero VirusTotal detections (0/95 engines) and registration through Cloudflare, Inc. The absence of detections highlights the evolutionary nature of modern phishing infrastructure, which frequently bypasses signature-based detection systems by rotating infrastructure and leveraging trusted CDNs. If you visited samevellay.pages.dev, immediately disconnect your wallet and revoke any connected permissions. Scan your device with updated antivirus software and clear browser cache and cookies. Report the domain to PhishDestroy and your local cybercrime unit to aid ongoing investigations. Never interact with wallet connection prompts on untrusted sites. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 172.66.44.167 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/a544e19d-f9cd-4afe-a650-dbce3a994504 - PhishDestroy: https://phishdestroy.io/domain/samevellay.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/samevellay.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/samevellay.pages.dev/ Last updated: 2026-04-01