xcvb-ea6[.]pages[.]dev

PhishDestroy identifies xcvb-ea6.pages.dev as an active crypto drainer domain currently under investigation for stealing cryptocurrency. This Cloudflare Pages-hosted site is distributing malicious payloads designed to drain digital wallets without user consent. The threat remains active and may expand to new victims while evading detection systems.

This domain was flagged by 0 out of 95 VirusTotal security vendors as of the latest scan, indicating it currently evades mainstream detection despite clear malicious intent. It resolves to IP 172.66.44.78 through Cloudflare, Inc. registration with a Let's Encrypt SSL certificate. The domain shows no current presence on reputable blocklists, maintaining moderate trust scores across threat intelligence platforms.

While threat analysis continues, users should immediately avoid interacting with xcvb-ea6.pages.dev and verify its status through PhishDestroy's real-time scanning system. Given its crypto drainer functionality and active evasion of detection systems, this domain poses significant risk to cryptocurrency holders. Recommend blocking this domain at network level and warning any contacts who may have received wallet transaction prompts from this source. The investigation status may update as additional threat intelligence becomes available.