pages-trzrsuiteus[.]pages[.]dev

PhishDestroy identifies pages-trzrsuiteus.pages.dev as an active crypto drainer posing as a legitimate service. This threat leverages deceptive landing pages to trick users into connecting crypto wallets, enabling unauthorized fund transfers. The domain is currently under investigation but remains operational, indicating ongoing malicious activity targeting cryptocurrency users.

This domain was flagged with 0 detections out of 95 on VirusTotal, suggesting minimal detection by security vendors. It resolves to IP 172.66.44.106 via Cloudflare, Inc., with no reported blocklist entries at this time. The SSL certificate, issued by Google Trust Services, adds superficial legitimacy but does not mitigate the underlying phishing threat. Notably, the domain’s infrastructure is consistent with known crypto drainer operations, which often exploit free subdomains (pages.dev) to evade takedowns.

To mitigate risks, users should avoid interacting with pages-trzrsuiteus.pages.dev or its linked pages. Verify domains via PhishDestroy’s threat intelligence before engaging. If already connected to a wallet, revoke permissions immediately through your wallet provider’s settings. Report suspicious domains to PhishDestroy for further analysis and community protection.