# trust-faq-wallet.pages.dev — SUSPICIOUS

> trust-faq-wallet.pages.dev is a live crypto-drainer site detected by 2/95 VirusTotal scanners. It mimics wallet FAQs to steal crypto and should be avoided.

## Summary
PhishDestroy identifies trust-faq-wallet.pages.dev as an active crypto-drainer site that surreptitiously siphons cryptocurrency assets from unwitting users. The domain weaponizes a faux wallet FAQ to harvest private keys and seed phrases, then drains connected wallets in seconds. No legitimate wallet brand is being impersonated, and the threat classifies strictly as an automated drainer kit operating under the seed 6c885f.  This domain resolves via Cloudflare’s hosting to IP address 188.114.97.3 and is secured with a Google Trust Services SSL certificate. VirusTotal flags the site at a low but concerning score of 2/95 security vendors, indicating limited but real malicious detection. Creation date is recent and the domain is not currently flagged by Google Safe Browsing; however, it remains absent from major blocklists at this time.  The site remains active as of today, with no takedown action observed in public records. Users should immediately block the domain and IP, avoid any interaction, and warn their communities. Because drainer kits evolve rapidly, the residual risk remains elevated until widespread blocklisting and certificate revocation occur.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2cf31cc9-d7f4-4d8a-8279-e4beddca4c46
- PhishDestroy: https://phishdestroy.io/domain/trust-faq-wallet.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/trust-faq-wallet.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/trust-faq-wallet.pages.dev/
Last updated: 2026-03-21