# auth-trzr-bitcoin-wallet.pages.dev — SUSPICIOUS

> PhishDestroy identifies auth-trzr-bitcoin-wallet.pages.dev as a Bitcoin brand impersonation site. VirusTotal shows 0/95 detections. Avoid entering credentials.

## Summary
PhishDestroy flags auth-trzr-bitcoin-wallet.pages.dev as an active brand impersonation domain mimicking Bitcoin. This site exploits the trusted Bitcoin brand to deceive users into surrendering sensitive information, likely for cryptocurrency theft.  This domain poses a moderate risk due to its impersonation of the Bitcoin brand, a high-value target for fraudulent actors. VirusTotal currently reports 0/95 detections, indicating no antivirus engines have flagged its malicious payloads yet. Registered via Cloudflare, Inc., it resolves to IP 188.114.96.3 and operates under a Google Trust Services SSL certificate. While the creation date remains unverified, the absence of detections and the use of a reputable hosting provider suggest a recently deployed threat still under evaluation by security vendors. The domain's structure—specifically the inclusion of 'bitcoin-wallet'—directly targets users seeking legitimate Bitcoin wallet services.  Technical indicators reveal this site is likely a crypto drainer or credential theft tool, designed to harvest private keys, seed phrases, or login credentials under the guise of an authentic service. The combination of a free Cloudflare Pages subdomain and a legitimately issued SSL certificate creates a deceptive facade, reducing user suspicion. Given the 0/95 VirusTotal score, traditional antivirus tools may not yet recognize its malicious nature, increasing exposure risk.  Users must avoid interacting with this domain entirely. If credentials or wallet information were entered, immediately transfer remaining funds to a new wallet and revoke any associated permissions. Report the domain to Cloudflare (via their abuse portal) and Bitcoin’s official channels to expedite takedown. Use hardware wallets and bookmarked URLs for all Bitcoin-related transactions to prevent similar attacks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Bitcoin

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/dae610a4-c058-4b1f-9760-8b5b3355ff80
- PhishDestroy: https://phishdestroy.io/domain/auth-trzr-bitcoin-wallet.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/auth-trzr-bitcoin-wallet.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/auth-trzr-bitcoin-wallet.pages.dev/
Last updated: 2026-03-22