deep-6dv[.]pages[.]dev

PhishDestroy identifies deep-6dv.pages.dev as an active cryptocurrency drainer domain deployed under Cloudflare Pages. The threat exhibits live malicious behavior and remains unblocked by security vendors, warranting immediate caution from users and defenders.

This domain, registered via Cloudflare, Inc., resolves to IP 188.114.96.3 and operates with a Google Trust Services SSL certificate. As of seed 6ef75a, deep-6dv.pages.dev shows zero detections across 95 VirusTotal engines and has not been listed on any known blocklists. Despite this absence of coverage, the threat type—crypto drainer—represents high-risk potential for digital asset theft.

At present, deep-6dv.pages.dev remains active and unmitigated. Users are strongly advised to avoid visiting or interacting with the domain. Organizations should implement network-level blocking via IP and domain reputation feeds. Security teams are encouraged to monitor for downstream compromise and report any observed wallet interactions to relevant blockchain forensics platforms.