cryptopump-a4t[.]pages[.]dev

PhishDestroy identifies cryptopump-a4t.pages.dev as a live crypto drainer phishing page actively hosted on Cloudflare Pages. It resolves to IP 188.114.96.3 and currently shows zero detections across 95 VirusTotal engines, indicating evasion of automated scanning. The domain leverages Google Trust Services SSL certificates to appear legitimate and is flagged as under_investigation due to its highly suspicious nature and cryptocurrency-themed content. This domain was flagged as a generic phishing domain on September 2024. It impersonates a crypto ‘pump’ service to deceive users into connecting wallets under the guise of guaranteed profits. The attacker registers the page via Cloudflare, Inc., which enables rapid deployment and evasion of IP-based blocking, while the Google-issued SSL certificate further lulls victims into a false sense of security. At present, VirusTotal returns 0/95 detections and no public blocklist entries are associated with the domain, increasing the risk of successful compromise for unsuspecting users. If you’ve visited cryptopump-a4t.pages.dev, disconnect your wallet immediately and revoke any unauthorized permissions via your wallet interface. Do not interact with prompts or download any files. Report the domain to your browser’s safe browsing program and monitor wallet activity for unauthorized transactions. Users are advised to use hardware wallets and avoid clicking on unverified links in social media or messaging platforms.