# en-hrd-wallet.pages.dev — MALICIOUS > PhishDestroy flags en-hrd-wallet.pages.dev as a crypto drainer domain, flagged by 12 of 95 VirusTotal vendors. Avoid connecting wallets or entering funds. ## Summary en-hrd-wallet.pages.dev is an active crypto drainer domain detected by PhishDestroy security researchers. This domain was flagged by 12 of 95 VirusTotal security vendors as a crypto drainer, indicating elevated malicious activity. It was registered through Cloudflare, Inc. and resolves to IP address 172.66.47.155. The domain holds a Google Trust Services SSL certificate, which may appear legitimate at first glance. As of current intelligence, this domain has not been observed impersonating a specific brand but is actively operational as a crypto drainer. PhishDestroy analysts assess this domain as an elevated risk due to its confirmed crypto drainer functionality and moderate detection rate on VirusTotal. The use of Cloudflare infrastructure and a Google-issued SSL certificate suggests an attempt to appear trustworthy. Users are strongly advised to avoid interacting with this domain, including connecting cryptocurrency wallets or entering any financial information. If this domain has been encountered in unsolicited communications or suspicious links, report it immediately to your security team or through PhishDestroy’s verification portal for community-wide protection. ## Threat Details - Verdict: MALICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 172.66.47.155 ## Detection Status - VirusTotal: 12 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/8abca9ea-41eb-40ce-916a-9079ad96884b - PhishDestroy: https://phishdestroy.io/domain/en-hrd-wallet.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/en-hrd-wallet.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/en-hrd-wallet.pages.dev/ Last updated: 2026-03-27