# deffilama-wallit-sso.pages.dev — SUSPICIOUS

> Warning: deffilama-wallit-sso.pages.dev is a phishing site impersonating a wallet service. Avoid entering credentials and stay safe online.

## Summary
PhishDestroy identifies deffilama-wallit-sso.pages.dev as a medium-risk phishing domain that impersonates a wallet service login, aiming to steal user credentials. Phishing sites like this pose a serious risk by misleading users into providing sensitive information such as usernames, passwords, or private keys.

This phishing attempt works by mimicking legitimate wallet single sign-on (SSO) pages to trick users into inputting their authentication details. The domain resolves to an IP address managed by Cloudflare and was created recently, increasing suspicion. It is flagged on two security blocklists and detected by 4 out of 95 vendors in VirusTotal scans. The site has since been taken offline, which helps prevent further harm.

If you visited this site, immediately change any credentials you may have entered and monitor your accounts for suspicious activity. Avoid clicking on links from untrusted sources and always verify website URLs carefully before entering sensitive data. Using up-to-date antivirus software and enabling multi-factor authentication can also reduce the risk of fraud.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP ?)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-06 11:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.45.6
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: max.ns.cloudflare.com meg.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc287-fe94-74ff-82f6-39fee484d8c7.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/deffilama-wallit-sso.pages.dev
- Wayback Machine: https://web.archive.org/web/https://deffilama-wallit-sso.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/deffilama-wallit-sso.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/deffilama-wallit-sso.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/deffilama-wallit-sso.pages.dev/
Last updated: 2026-03-19