v2-70z[.]pages[.]dev

PhishDestroy identifies v2-70z.pages.dev as an active phishing domain specifically engaging in crypto draining tactics. This means it attempts to steal users' cryptocurrency assets by tricking them into revealing sensitive information such as private keys or login credentials. The domain employs sophisticated social engineering techniques to deceive victims, posing a significant threat to anyone involved in digital currency transactions.

Technical analysis reveals that v2-70z.pages.dev currently has zero detections out of 95 engines on VirusTotal, indicating that it may evade traditional antivirus filters despite its malicious nature. The domain resolves to IP address 172.66.47.158 and is registered through Cloudflare, Inc., which is commonly used to mask malicious activity. It holds an SSL certificate issued by Google Trust Services, lending it a facade of legitimacy. The domain is flagged with the SOCIAL_ENGINEERING label by Google Safe Browsing and appears on three security blocklists. Additionally, it has been blocked by security tools including SEAL, MetaMask, and ScamSniffer, signaling an elevated risk level.

Users who have visited v2-70z.pages.dev should immediately cease any interaction with the site and avoid entering any personal or financial information. It is recommended to run a full security scan with updated antivirus software and change any potentially compromised passwords or wallet credentials. Monitoring cryptocurrency accounts for unauthorized activity is also advised. Users can verify the domain’s current status and receive further guidance by consulting PhishDestroy’s comprehensive threat database.