# trust-wal-tension.pages.dev — SUSPICIOUS

> trust-wal-tension.pages.dev is a live crypto drainer phishing site impersonating Ethereum wallets. Flagged by 1 of 95 VirusTotal vendors, verify URLs before.

## Summary
PhishDestroy identifies trust-wal-tension.pages.dev as an active phishing domain posing as a fake Ethereum wallet. The site is currently distributing a crypto drainer designed to steal user funds during wallet connection attempts. This campaign remains in active operation as of the latest investigation.  This domain was flagged by 1 of 95 VirusTotal security vendors, is registered through Cloudflare, Inc., and resolves to IP address 188.114.97.3. The Google Trust Services SSL certificate suggests an attempt to appear legitimate, but the low trust score and single detection indicate a newly deployed or evasive threat actor infrastructure.  Users should avoid interacting with trust-wal-tension.pages.dev and verify all wallet connection URLs using PhishDestroy’s real-time scanning tool. Block the domain at network and DNS levels. Report any suspicious wallet connection attempts to PhishDestroy’s threat intelligence team for further analysis.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/fe61dcb2-4c17-4ef1-bfb4-71c920bec2a9
- PhishDestroy: https://phishdestroy.io/domain/trust-wal-tension.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/trust-wal-tension.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/trust-wal-tension.pages.dev/
Last updated: 2026-03-21