# satoshidex-in.pages.dev — SUSPICIOUS

> PhishDestroy identifies satoshidex-in.pages.dev as a crypto drainer impersonating decentralized exchanges. VirusTotal flags 0/95.

## Summary
PhishDestroy identifies satoshidex-in.pages.dev as an active crypto drainer domain designed to trick visitors into connecting malicious wallets or surrendering private keys. The site mimics legitimate decentralized exchange interfaces, prompting users to sign fraudulent transactions that drain cryptocurrency holdings. Security analysts note the domain leverages Cloudflare hosting and a Google Trust Services SSL certificate to appear legitimate, masking its malicious intent under a deceptive subdomain structure.  This domain was flagged by PhishDestroy during routine monitoring and shows 0 detections out of 95 VirusTotal engines as of the latest scan. The domain resolves to IP address 188.114.96.3 and is registered through Cloudflare, Inc., which often obscures true ownership and hosting details. While the SSL certificate issued by Google Trust Services lends a veneer of authenticity, the absence of blocklist coverage (0/95 detections) underscores the need for real-time threat intelligence to detect emerging campaigns. Its use of a .pages.dev subdomain further exploits trust in popular developer platforms to bypass traditional security measures.  Users who visited satoshidex-in.pages.dev should immediately disconnect any connected wallets, revoke any unauthorized permissions via blockchain explorers or wallet interfaces, and scan their devices for malware. Never enter private keys or sign transactions on unfamiliar sites. Report the domain to PhishDestroy and your wallet provider. Always verify URLs through official channels and use hardware wallets for high-value transactions to reduce exposure to drainer scripts and fake interfaces.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/79a668da-6df7-4dcd-8263-3c5d465f1c70
- PhishDestroy: https://phishdestroy.io/domain/satoshidex-in.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/satoshidex-in.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/satoshidex-in.pages.dev/
Last updated: 2026-03-27