# trst-en-web-wallt.pages.dev — SUSPICIOUS

> trst-en-web-wallt.pages.dev is a crypto drainer impersonating trustwallet.com. VirusTotal only flags 0/95; verify any crypto transaction on PhishDestroy.

## Summary
PhishDestroy identifies trst-en-web-wallt.pages.dev as an active crypto drainer campaign delivering a fake Trust Wallet login page. The domain hosts a spoofed interface designed to trick users into entering wallet recovery phrases or private keys, which are immediately transmitted to attacker-controlled wallets. This domain leverages Cloudflare Pages to bypass standard hosting restrictions and employs a valid SSL certificate issued by Google Trust Services to appear legitimate. The campaign targets cryptocurrency users under the guise of a routine wallet update or security verification, aiming to drain funds from compromised wallets without raising immediate suspicion.  Analysis reveals trst-en-web-wallt.pages.dev shows no detection on 95 security engines via VirusTotal, indicating minimal coverage by automated scanning tools. The domain resolves to IP address 188.114.96.3, which falls within Cloudflare's infrastructure range, further complicating direct takedown efforts. This domain was registered through Cloudflare, Inc., a common tactic among malicious actors seeking to exploit CDN-based anonymity. Given the absence of blocklist entries at time of investigation, users should exercise heightened caution when encountering any unsolicited links claiming to relate to Trust Wallet or similar crypto services.  If you have visited trst-en-web-wallt.pages.dev, immediately disconnect your device from the internet to prevent further data exfiltration. Do not enter any wallet recovery phrases, private keys, or seed phrases on the site—these are virtually guaranteed to be compromised. Rotate all wallet credentials and enable multi-factor authentication where available. Scan your device for malware and consider transferring remaining assets to a new, isolated wallet with a freshly generated seed phrase. Report the domain to PhishDestroy for further investigation and community protection.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/5dfd1259-8ffd-422f-9759-7b6c19885f0a
- PhishDestroy: https://phishdestroy.io/domain/trst-en-web-wallt.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/trst-en-web-wallt.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/trst-en-web-wallt.pages.dev/
Last updated: 2026-03-23