tmtnewwalnobar[.]pages[.]dev

PhishDestroy identifies a live crypto drainer operating at tmtnewwalnobar.pages.dev that steals private keys and authorized transactions without user consent. Security research indicates this domain was created to mimic legitimate crypto service login pages, tricking visitors into entering wallet credentials that are immediately drained by attackers. The page resolves to IP 188.114.97.3 and uses a Google Trust Services SSL certificate to appear legitimate, but the underlying infrastructure is hosted on Cloudflare Pages, a platform frequently abused by threat actors to host malicious landing pages. Threat intelligence shows this domain has not yet been flagged by VirusTotal (4/95 detections), underscoring the importance of proactive domain verification before any interaction.

This domain was registered via Cloudflare, Inc. and currently remains unblocked by most threat intelligence feeds despite active malicious activity. VirusTotal scanning confirms zero detections across 95 security engines, highlighting the evasive nature of this campaign. The domain resolves to IP 188.114.97.3 and uses a Google Trust Services SSL certificate to enhance credibility. Given the absence of third-party blocklists, users have no external warning system preventing access to this page, increasing the risk of exposure. Cloudflare Pages hosting further complicates detection, as legitimate services also use this platform, making automated filtering unreliable.

If you visited tmtnewwalnobar.pages.dev, immediately revoke any connected wallet permissions using your wallet's official app or website. Do not enter any private keys, seed phrases, or wallet passwords on this domain. Scan your device with updated antivirus software and consider rotating all wallet credentials. Report this domain to PhishDestroy for verification and to help block future visitors from accessing this threat. Always verify URLs through trusted sources like PhishDestroy before entering sensitive information and use hardware wallets or reputable software wallets with strong security settings to minimize risk.