trezo-guide-suite[.]pages[.]dev

PhishDestroy identifies trezo-guide-suite.pages.dev as an active crypto drainer phishing domain as of seed 15ad4b. The site poses as a guide suite to deceive users into connecting wallets or revealing seed phrases, resulting in direct cryptocurrency theft. Current status remains active with no takedown observed.

This domain resolves to IP 188.114.96.3 and was flagged by 2 of 95 VirusTotal security vendors. Registered through Cloudflare, Inc., it holds an SSL certificate issued by Google Trust Services. The site’s infrastructure leverages Cloudflare Pages, a legitimate platform, to host malicious content under a guise of credibility. Only 2.1% detection coverage across major vendors underscores its ability to evade initial screening tools.

Given the elevated risk and active status, immediate action is required. Users who have interacted with this domain should revoke any connected wallet permissions, transfer remaining assets to a clean wallet, and scan devices for infostealer malware. PhishDestroy advises blocking the domain at the network perimeter and DNS levels. Report this domain via PhishDestroy’s portal to enhance collective threat intelligence. Exercise heightened scrutiny for domains hosted on Cloudflare Pages that solicit wallet connections or sensitive credentials.