gempad-app-sol[.]pages[.]dev

PhishDestroy identifies gempad-app-sol.pages.dev as an active cryptocurrency wallet phishing domain under investigation. The site leverages Cloudflare Pages and a Google Trust Services SSL certificate to appear legitimate while harvesting sensitive wallet credentials or private keys. Users should approach this domain with extreme caution as it poses an immediate threat to cryptocurrency holdings and personal financial data.

This domain was flagged for generic phishing and remains active despite zero detections (0/95) on VirusTotal. It is registered through Cloudflare, Inc., resolves to IP 172.66.47.204, and operates under the .pages.dev TLD. The SSL certificate, issued by Google Trust Services, may further deceive users into believing the site is secure. Given its current status and lack of detection, this domain represents a high-risk threat that requires proactive mitigation to prevent financial loss.

To mitigate risks, users must avoid entering any cryptocurrency wallet credentials, seed phrases, or private keys on this domain. If accessed accidentally, disconnect from the site immediately and revoke any exposed credentials through your wallet provider’s security settings. Report the domain to your antivirus vendor, browser security extensions, and platforms like PhishDestroy to aid in blocking. Additionally, monitor cryptocurrency wallets and financial accounts for unauthorized transactions, as this domain may be part of a broader phishing campaign targeting crypto users.