# learn-trzoe-us.pages.dev — SUSPICIOUS

> learn-trzoe-us.pages.dev hosts a crypto drainer phishing site with 0/95 detections on VirusTotal. Avoid entering wallet details. Do not interact.

## Summary
PhishDestroy identifies learn-trzoe-us.pages.dev as an active crypto drainer scam designed to trick users into connecting cryptocurrency wallets and approve malicious transactions. The domain mimics legitimate crypto service pages to lure victims into authorizing token transfers or signing malicious smart contracts. This type of attack is particularly dangerous because it can drain entire wallets within seconds without requiring traditional credential theft.  This domain was flagged with exactly 0 detections out of 95 VirusTotal engines as of the latest scan, indicating it has evaded detection by major antivirus platforms. Registered through Cloudflare on an unspecified date, the site operates under the Pages.dev subdomain service, which malicious actors frequently abuse for short-lived phishing campaigns. The SSL certificate issued by Google Trust Services lends false credibility, while resolving to IP 172.66.47.43 confirms its connection to Cloudflare’s hosting infrastructure.  If you visited this site, immediately disconnect your wallet from any dApps and revoke any token approvals you may have granted. Use blockchain explorers like Etherscan or BscScan to check your wallet’s ‘Approvals’ section and remove suspicious permissions. Do not interact with any further prompts or transactions. Report suspicious wallet addresses to your platform’s security team and consider transferring remaining funds to a newly generated wallet with no transaction history.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.43

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/learn-trzoe-us.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/learn-trzoe-us.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/learn-trzoe-us.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/learn-trzoe-us.pages.dev/
Last updated: 2026-04-07