exotic-markets[.]pages[.]dev

PhishDestroy identifies exotic-markets.pages.dev as a crypto drainer posing as a fake exotic market trading platform. This domain mimics legitimate cryptocurrency exchange interfaces to trick users into connecting crypto wallets, where malicious scripts silently drain funds to attacker-controlled addresses. The threat involves unauthorized transaction approvals triggered by deceptive UI elements, often exploiting wallet extension vulnerabilities or social engineering tactics to bypass security checks. Users risk irreversible financial losses if they interact with this site, as drainers exploit blockchain transaction signing mechanisms to siphon assets without requiring additional credentials.

This domain was flagged through PhishDestroy’s automated pipeline after VirusTotal analysis reported 0 out of 95 security engines detecting the threat at time of submission. The domain was registered via Cloudflare, Inc., leveraging Google Trust Services SSL certificates to appear legitimate. Technical analysis reveals the site resolves to IP 188.114.96.3, a Cloudflare-operated address commonly associated with phishing and malware campaigns. The combination of zero detections, recent registration, and cryptocurrency-targeting behavior suggests an active and evolving threat that may evade traditional security tools.

If you visited exotic-markets.pages.dev, immediately disconnect your wallet from the site and revoke any unauthorized permissions via your wallet’s connection management interface. Do not approve any transaction requests unless you initiated them on a verified platform. Run a malware scan on your device to check for infections, as drainers often bundle keyloggers or clipboard hijackers. Report the domain to PhishDestroy to help block future attacks, and warn others in your cryptocurrency community about this threat. Always verify URLs against official sources before entering wallet credentials or signing transactions.