metawalltelogiorg-guides[.]pages[.]dev

PhishDestroy identifies the domain metawalltelogiorg-guides.pages.dev as a recently activated crypto drainer, designed to trick visitors into connecting cryptocurrency wallets and silently approve malicious token transfers that drain assets. The site masquerades under the guise of a legitimate guide page, leveraging Cloudflare’s Pages.dev hosting and a Google Trust Services SSL certificate to appear authentic at first glance. Threat intelligence shows no antivirus engines currently flag the domain despite its active abuse, indicating it may be either very new or carefully crafted to evade detection.

This domain was flagged by PhishDestroy on seed aaf80b and resolves to IP 188.114.96.3 via Cloudflare’s infrastructure. VirusTotal analysis returned 0 detections out of 95 engines as of the investigation timestamp. The SSL certificate was issued by Google Trust Services, and the domain is registered through Cloudflare, Inc., which obscures the true registrant and complicates takedown efforts. The pages.dev subdomain suggests a recent or hastily assembled campaign targeting users searching for Meta-related guides, possibly via SEO poisoning or phishing links in social media or messaging platforms.

If you visited metawalltelogiorg-guides.pages.dev, immediately disconnect your device from the internet and open your wallet application. Check for any unauthorized transactions or pending approvals; revoke suspicious permissions immediately using tools like revoke.cash or your wallet’s built-in approval manager. Disable any browser extensions, clear cookies and cached data, and run a full antivirus scan. Report the domain to your wallet provider and consider transferring remaining assets to a clean wallet. Monitor your accounts closely for signs of compromise and enable two-factor authentication wherever possible. Do not reconnect or interact further with the site.