info-trzr-wallt[.]pages[.]dev

This domain, info-trzr-wallt.pages.dev, was confirmed to operate as a crypto wallet drainer, a specialized phishing threat designed to siphon cryptocurrency from victims' digital wallets. Analysis indicates the site employed deceptive interfaces mimicking legitimate wallet management platforms, tricking users into authorizing transactions that transferred funds to attacker-controlled addresses. The threat specifically targeted users of decentralized finance (DeFi) applications and non-custodial wallets, where private key or seed phrase exposure could result in irreversible asset loss. Infrastructure analysis reveals the domain resolved to the IP address 188.114.97.3 and was registered through Cloudflare, Inc., with a creation date of April 03, 2026. Detection metrics show the domain was flagged by 14 out of 95 security vendors on VirusTotal, while appearing on one additional security blocklist. The SSL certificate was issued by Google Trust Services, a common practice among phishing operators to lend a false sense of legitimacy. The domain's trust score was rated 0/100, further corroborating its malicious intent. Users who visited info-trzr-wallt.pages.dev should immediately revoke any wallet authorizations granted to unknown or suspicious applications. It is critical to transfer remaining assets to a new wallet with a fresh seed phrase and monitor transaction histories for unauthorized activity. If credentials or private keys were entered, assume full compromise and cease using the affected wallet. Security teams are advised to update blocklists with the domain and associated IP to prevent further exposure within their networks.