xversewallet[.]pages[.]dev

The domain xversewallet.pages.dev is a suspected crypto drainer phishing site. It poses an elevated risk to users and is currently taken offline. The site does not impersonate any specific brand and does not use a known drainer kit. The page title observed was 'Suspected phishing site | Cloudflare'.

xversewallet.pages.dev has been flagged by 7 of 95 vendors on VirusTotal, including Criminal IP, alphaMountain.ai, and BitDefender. The domain is registered through Cloudflare, Inc. and was created on February 21, 2026. It resolves to the IP address 172.66.44.107, which is located in the US and belongs to AS13335 Cloudflare, Inc. The site appears on 1 security blocklist, specifically PhishDestroy, and has an SSL certificate issued by Google Trust Services / WE1. Technologies detected on the site include HSTS, Cloudflare, and HTTP/3. The current HTTP status is 403, indicating that access to the site is forbidden.

If a user has interacted with xversewallet.pages.dev, they should immediately revoke any token approvals and move their cryptocurrency funds to a new, secure wallet. For those who may have entered login credentials, it is crucial to change passwords and enable two-factor authentication on all related accounts. Users should also monitor their accounts for any signs of unauthorized activity or fraud. To report this phishing site, individuals can submit the domain to PhishDestroy and other reputable security organizations for further analysis and action.