test-terahash-co[.]pages[.]dev

PhishDestroy identifies test-terahash-co.pages.dev as an active crypto drainer phishing domain under investigation for stealing cryptocurrency and credentials. This page leverages Cloudflare Pages hosting and Google Trust Services SSL to appear legitimate while impersonating a crypto service, specifically targeting wallet connections and fund transfers. The infrastructure (188.114.97.3) and low detection rate warrant immediate caution. This domain was flagged via automated analysis with a VirusTotal detection ratio of 1/95, indicating no antivirus or security vendor has yet classified it as malicious. It is registered through Cloudflare, Inc. and resolves to IP 188.114.97.3, assigned to Cloudflare’s hosting network. The SSL certificate issued by Google Trust Services further enhances its deceptive legitimacy. Originating from Cloudflare Pages, this platform is commonly abused for phishing due to its free and fast deployment, often impersonating crypto services such as wallet interfaces or mining platforms. The risk level remains under investigation but is assessed as elevated due to active hosting, lack of detection, and targeting of crypto users. Users should avoid visiting this domain, especially if linked from unsolicited emails, social media, or ads. For wallet safety, verify all URLs manually, use hardware wallets, and revoke any suspicious token approvals. Security teams should monitor for connections to 188.114.97.3 and blocklist this domain based on current threat intelligence.