trustpad-306[.]pages[.]dev

PhishDestroy identifies TrustPad-306.pages.dev as a high-risk crypto drainer phishing domain actively engaged in fraudulent activities. This domain mimics legitimate crypto platforms, likely targeting users with fake login portals or malicious transaction prompts designed to drain digital assets. The site represents a clear and present danger to cryptocurrency holders seeking secure financial interactions.

This domain was flagged by 13 out of 95 security vendors on VirusTotal, indicating widespread suspicion but not universal detection. It was registered through Cloudflare, Inc., and resolves to IP address 172.66.47.106. The domain carries a Google Trust Services SSL certificate and was recently created, as suggested by its association with Cloudflare Pages. Google Safe Browsing has classified this site under "SOCIAL_ENGINEERING," marking it as a known deceptive platform. Its low detection rate and short operational window suggest a rapidly evolving threat designed to evade early-stage blocklists.

As of the latest assessment, TrustPad-306.pages.dev remains active and poses a high-risk threat to visitors. PhishDestroy continues to monitor its status and behavior patterns, encouraging users to report encounters and avoid interaction. Immediate validation on PhishDestroy’s platform is strongly advised to prevent potential financial loss. While mitigation efforts are underway, the domain’s use of legitimate infrastructure (Cloudflare, trusted SSL) complicates rapid takedown. Users are urged to verify domain authenticity, check for HTTPS and spelling accuracy, and cross-reference URLs against known phishing databases before engaging with any crypto-related platform.