tanukilaunchpad[.]pages[.]dev

PhishDestroy identifies a live phishing site at tanukilaunchpad.pages.dev posing as a legitimate crypto launchpad interface. This fraudulent domain mimics a token presale page to trick visitors into connecting their MetaMask wallets and approving malicious token approvals. Once connected, attackers can drain approved tokens or inject fake transactions. The page uses Cloudflare Pages to host content, making it appear legitimate while bypassing simple domain checks. This campaign specifically targets users searching for early-stage crypto opportunities, often promoted through Discord, Telegram, or social media ads promising high returns. Avoid interacting with any unsolicited links promising guaranteed profits. This domain was flagged by ScamSniffer and appears on 1 active blocklist, though it remains undetected by security engines with 9/95 VirusTotal detections as of now. Registrar data shows it was provisioned through Cloudflare on an unknown date under Google Trust Services SSL. The hosting IP 172.66.47.132 is part of Cloudflare’s infrastructure, making it harder to block at the network level without proper detection logic. The low detection rate suggests this is a new or evolving campaign still building its footprint. Users should treat any Cloudflare Pages domain advertising crypto token sales with extreme caution, especially those with recent creation dates. If you visited tanukilaunchpad.pages.dev or connected your wallet, revoke all token approvals immediately using tools like revoke.cash or Etherscan. Disconnect the site from your wallet via MetaMask settings, then clear browser cookies and scan for malware. Report the domain to your antivirus and block it in your hosts file or firewall. Never approve unknown token contracts or enter seed phrases. Monitor your wallet for unauthorized transactions for at least 72 hours. For future protection, enable hardware wallet signing and disable browser extension wallet auto-connect features where possible.