briototo-exploramexicotours[.]pages[.]dev

PhishDestroy identifies briototo-exploramexicotours.pages.dev as an active crypto drainer impersonating Mexico Tours. This page is under investigation but remains accessible, posing immediate risk to visitors. Domains like this often trick users into connecting crypto wallets under false pretenses, such as fake tour promotions or giveaways, to drain funds directly.

This domain was flagged with a risk level of under_investigation but is actively distributing malicious content. It resolves to IP address 188.114.96.3 via Cloudflare, Inc., using a Let's Encrypt SSL certificate for added deception. As of the latest scan, it shows 0 detections out of 95 on VirusTotal, indicating it is not yet widely blacklisted. The domain is hosted on Cloudflare Pages, a legitimate platform that has been abused by threat actors to host phishing and malware campaigns quickly.

To mitigate risk, users should avoid interacting with this site entirely. Do not click any links, connect wallets, or input personal or payment details. If you’ve already connected a wallet or entered information, revoke permissions immediately via your wallet provider and run a security scan on your device. Always verify URLs and use tools like PhishDestroy to validate domains before engaging. Report this domain to your security provider or PhishDestroy to help block further distribution.