testiiii[.]pages[.]dev

PhishDestroy has identified testiiii.pages.dev as a live crypto drainer phishing domain designed to steal cryptocurrency from unwary users. This site impersonates legitimate services to trick visitors into connecting wallets or entering seed phrases, enabling attackers to drain funds instantly. The domain leverages Cloudflare’s infrastructure and a Google Trust Services SSL certificate to appear credible, masking its malicious intent behind a veneer of legitimacy. Users who access this site risk immediate financial loss if they interact with any wallet connection prompts or input sensitive data. This domain was flagged through PhishDestroy’s automated pipeline after detecting structured patterns consistent with crypto drainer toolkits. Intelligence indicates the domain resolves to IP 172.66.47.159, a Cloudflare-operated address commonly abused by phishing campaigns. VirusTotal currently shows 0 detections out of 95 engines, highlighting the stealthy nature of this threat which evades traditional antivirus systems. The domain was registered through Cloudflare, Inc., a tactic often used to obscure the true registrant and prolong operational lifespan. Despite its clean VirusTotal score, PhishDestroy’s behavioral analysis flags it as a high-risk crypto drainer due to its active hosting and redirection chains. If you have visited testiiii.pages.dev, cease all wallet interactions immediately and disconnect any connected devices from the internet. Scan your device with PhishDestroy’s free tool to detect malicious artifacts, and revoke any wallet connections made during the session via your wallet provider’s security dashboard. Do not enter seed phrases or private keys on any page linked from this domain. Report this URL to your wallet provider and consider transferring remaining assets to a fresh wallet with new credentials. PhishDestroy continues to monitor this domain, and users are advised to verify all crypto-related links using our real-time verification system before interacting.