# thrust-website.pages.dev — SUSPICIOUS > thrust-website.pages.dev is a crypto drainer site with 0/95 VirusTotal detections. If you visited, verify immediately on PhishDestroy. ## Summary PhishDestroy identifies thrust-website.pages.dev as a live crypto drainer posing as a legitimate service. The domain leverages cloud-hosted infrastructure to intercept transactions and steal cryptocurrency from unwitting users. Security teams observe that drainers like this one often masquerade as wallets, exchanges, or investment platforms to trick victims into connecting their crypto wallets under the guise of legitimate transactions. This domain was flagged with 0 detections on VirusTotal out of 95 scans, indicating it has not yet been widely recognized as malicious by security vendors. The domain was registered through Cloudflare, Inc., a common choice among threat actors due to its privacy protections and fast global hosting. The site uses an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy to visitors. Despite its current low detection rate, the infrastructure and configuration (resolving to IP 172.66.47.143) are consistent with active phishing campaigns targeting crypto users. If you visited thrust-website.pages.dev, disconnect any connected crypto wallets immediately and revoke any unauthorized permissions. Do not enter any credentials or connect your wallet on this site. Review your wallet’s transaction history for unauthorized transfers and consider transferring remaining funds to a new wallet. Report the domain through PhishDestroy’s portal to help improve detection and protect others. Stay alert for unexpected prompts to connect wallets or sign transactions, and always verify URLs before interacting. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 172.66.47.143 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/db63e133-82b0-44e0-96fb-110befd92a9e - PhishDestroy: https://phishdestroy.io/domain/thrust-website.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/thrust-website.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/thrust-website.pages.dev/ Last updated: 2026-04-11