emp-money[.]pages[.]dev

PhishDestroy identifies emp-money.pages.dev as a crypto drainer posing as Emp Money to steal cryptocurrency. This domain leverages Cloudflare's infrastructure and a Google Trust Services SSL certificate to appear legitimate, resolving to 172.66.47.198 with no current detections on VirusTotal (6/95). Security researchers note this domain remains active and unblocked despite its malicious nature. The registrar, Cloudflare, Inc., and the hosting IP (172.66.47.198) are commonly exploited by threat actors to bypass traditional security measures. While the page title 'Emp Money' suggests a cryptocurrency service, users should exercise extreme caution, as this domain includes no verifiable association with the legitimate Emp Money brand. Users who visited emp-money.pages.dev should immediately check their cryptocurrency wallets for unauthorized transactions. If any activity is detected, transfer remaining funds to a new wallet and revoke any connected app permissions. Report the domain to PhishDestroy for further analysis, as this domain remains under investigation with no current antivirus detection.