# io-trast.pages.dev — SUSPICIOUS

> io-trast.pages.dev is a verified crypto drainer impersonating a login portal. Flagged by 3 of 95 VirusTotal vendors, never engage—verify on PhishDestroy.

## Summary
PhishDestroy identifies io-trast.pages.dev as a live fake login phishing site targeting users with credential theft. The domain is actively resolving to a malicious infrastructure and remains unblocked by most vendors.

This domain was flagged by 3 of 95 VirusTotal security vendors, registered through Cloudflare, Inc., resolving to IP 188.114.97.3, and secured with a Google Trust Services SSL certificate. The Cloudflare Pages-hosted site shows no prior blocklist entries and exhibits low trust scores across threat intelligence feeds.

The campaign remains active as of the latest scan. Users are advised to avoid clicking links to io-trast.pages.dev and verify the domain’s status using PhishDestroy’s real-time threat database before entering any credentials.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6e007003-9e0a-49ad-bf95-187840dd0d40
- PhishDestroy: https://phishdestroy.io/domain/io-trast.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/io-trast.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/io-trast.pages.dev/
Last updated: 2026-03-21