io-trzr-pages-us[.]pages[.]dev

PhishDestroy identifies the domain io-trzr-pages-us.pages.dev as an active crypto-draining phishing site masquerading as a generic login portal. Visitors who enter credentials risk immediate theft of cryptocurrency from connected wallets, as the page silently drains funds via a malicious smart-contract interaction. This domain was flagged on seed 913835 and resolves to IP 188.114.96.3. It is registered through Cloudflare, Inc., carries a Google Trust Services SSL certificate, and currently shows zero detections out of 95 VirusTotal engines. Cloudflare Pages infrastructure is being abused to host the fake login page, which increases its appearance of legitimacy while routing stolen data to attacker-controlled addresses. The low detection rate highlights how rapidly new phishing pages bypass initial screening tools. If you visited io-trzr-pages-us.pages.dev, disconnect any cryptocurrency wallets immediately and revoke any recently approved smart-contract permissions using your wallet’s built-in safety features or tools like revoke.cash. Do not enter passwords or seed phrases on this page. Report the domain to PhishDestroy for takedown and scan your device with updated antivirus software. Never trust URLs that look similar but contain extra hyphens or unusual TLDs; always navigate directly to official websites or use trusted bookmarks.