simplytrr[.]pages[.]dev

PhishDestroy identifies simplytrr.pages.dev as an active crypto drainer scam site under investigation. This fraudulent domain is designed to deceive users into connecting crypto wallets, enabling unauthorized fund transfers under the guise of legitimate service offerings. The threat actor leverages Cloudflare’s Pages platform to host malicious content, exploiting the platform’s perceived trustworthiness to bypass initial scrutiny. This domain was flagged by ScamSniffer and appears on one security blocklist, though VirusTotal currently shows 0 detections out of 95 vendors as of the latest scan. Registered through Cloudflare, Inc., simplytrr.pages.dev resolves to IP 172.66.47.92 and utilizes a Google Trust Services SSL certificate, which may contribute to its ability to evade detection. The domain’s infrastructure suggests a recent deployment, with no additional metadata available on the exact creation date. Despite these efforts, the domain’s association with known scam-blocking entities and its presence on a security blocklist underscore its malicious intent. As this domain remains active and under investigation, users are strongly advised to avoid interaction with simplytrr.pages.dev. If any crypto wallet connections were made to this site, disconnect the wallet immediately and revoke any unauthorized permissions via your wallet’s security settings. Report this domain to your antivirus provider, browser vendor, and relevant crypto security platforms such as ScamSniffer or Chainalysis to aid in its takedown. Exercise heightened caution with domains hosted on free or low-trust platforms, particularly those impersonating crypto services.