# tarust-wallet.pages.dev — SUSPICIOUS

> Tarust-wallet.pages.dev is a live crypto drainer impersonating crypto wallets. 0 of 95 VirusTotal scanners detected it—verify safety on PhishDestroy immediately.

## Summary
PhishDestroy identifies the domain tarust-wallet.pages.dev as an active crypto drainer. The site currently poses a direct threat to cryptocurrency users by unauthorized asset extraction without user knowledge.

This domain was flagged by 0 of 95 VirusTotal vendors, indicating no current detection despite its malicious intent. Resolving to IP 172.66.44.139, it operates under Cloudflare, Inc. with a Google Trust Services SSL certificate, masking its fraudulent nature with legitimate infrastructure. The site leverages Cloudflare Pages for fast deployment and evasion, making it harder to trace.

The domain remains active and unblocked, requiring immediate verification and blacklisting. Users must avoid interacting with tarust-wallet.pages.dev and report it on PhishDestroy. Enable transaction alerts on crypto wallets, use hardware wallets when possible, and always verify URLs through trusted sources before entering credentials or connecting wallets.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.139

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b1f9ae57-25a8-4e27-84f7-6e85bf780301
- PhishDestroy: https://phishdestroy.io/domain/tarust-wallet.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/tarust-wallet.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/tarust-wallet.pages.dev/
Last updated: 2026-04-12