# sup-hrdwre-wallet.pages.dev — SUSPICIOUS

> sup-hrdwre-wallet.pages.dev is a crypto drainer posing as a hardware wallet login. It resolves to IP 188.114.96.

## Summary
PhishDestroy identifies sup-hrdwre-wallet.pages.dev as an active crypto drainer fraudulently mimicking a hardware wallet login interface. The domain is currently operational and distributing malicious scripts to steal cryptocurrency from unwitting users. This threat is under investigation but remains active as of the latest assessment.  

This domain was flagged by 0 of 95 VirusTotal vendors, indicating it has evaded automated detection systems despite clear malicious intent. It is registered through Cloudflare, Inc., resolves to IP address 188.114.96.3, and holds an SSL certificate issued by Google Trust Services. The domain leverages Cloudflare Pages to host its fraudulent content, making it appear legitimate at first glance. As of now, no known blocklists have flagged this domain, and its trust scores remain artificially inflated due to minimal detections.  

Users must avoid interacting with sup-hrdwre-wallet.pages.dev entirely due to its confirmed role in crypto drainer operations. If you have visited this domain or entered any credentials, immediately revoke wallet permissions, transfer funds to a secure wallet, and scan your device for malware. Report this domain to your antivirus provider and relevant blockchain security platforms to aid in its takedown. Exercise extreme caution with any unsolicited links claiming to offer hardware wallet services.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a7cf5245-8dbe-44e1-9bf5-954dfb52b200
- PhishDestroy: https://phishdestroy.io/domain/sup-hrdwre-wallet.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/sup-hrdwre-wallet.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/sup-hrdwre-wallet.pages.dev/
Last updated: 2026-03-24