wall-bq2[.]pages[.]dev

This domain, wall-bq2.pages.dev, is actively operating as a crypto wallet drainer, designed to deceive users into connecting their cryptocurrency wallets under the pretense of resolving account issues. The page title, 'Wallet Issues fix ? you're covered,' suggests a fraudulent support interface aimed at tricking victims into authorizing malicious transactions, which would result in the unauthorized transfer of digital assets to attacker-controlled addresses. Analysis indicates this is a high-risk threat due to its direct targeting of financial assets and the irreversible nature of cryptocurrency transactions. Infrastructure analysis reveals the domain was registered on March 30, 2026, through Cloudflare, Inc., and currently resolves to the IP address 188.114.97.3, hosted in a Canadian data center. The SSL certificate is issued by Google Trust Services (WE1), a common provider for both legitimate and malicious sites. Despite its recent creation, the domain has already been flagged by one security blocklist (PhishDestroy), though it remains undetected by antivirus engines, with a VirusTotal score of 0/95. The use of Cloudflare Pages infrastructure provides the attacker with a low-cost, high-availability hosting solution that complicates takedown efforts. Users who have visited wall-bq2.pages.dev or interacted with its content are advised to immediately revoke any wallet authorizations granted to the site. This can be done via wallet management interfaces or blockchain explorers that support token approval revocation. Affected individuals should also monitor their wallet transaction history for unauthorized activity and consider transferring remaining assets to a new wallet if compromise is suspected. Given the domain's active status and lack of detection by most security tools, users are urged to exercise caution with any communication or site claiming to offer wallet support, particularly those using urgent or alarmist language.