trust-faq-wallet[.]pages[.]dev

Analysis of trust-faq-wallet.pages.dev indicates a crypto drainer phishing domain with elevated risk, currently offline as of July 24, 2026. The domain was registered on March 22, 2026, through Cloudflare, Inc., and resolved to IP 188.114.97.3, hosted by Cloudflare in Canada. Nameservers autumn.ns.cloudflare.com and thaddeus.ns.cloudflare.com were in use, and the site employed HSTS, Cloudflare security layers, and HTTP/3 protocols. The SSL certificate was issued by Google Trust Services (WE1), a common provider for both legitimate and malicious domains.

Detection data shows the domain was flagged by 6 of 94 security vendors on VirusTotal and appeared on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. The page title, 'Suspected phishing site | Cloudflare,' suggests Cloudflare’s automated systems identified and restricted access, returning an HTTP 403 status. Gridinsoft assigned a trust score of 0/100, reinforcing the high-risk classification. No specific brand or wallet service is confirmed in the available data, though the scam type is classified as a crypto scam.

The exact content of the site remains unanalyzed, and no evidence links it to a known phishing kit or targeted campaign. Defenders should treat this domain as malicious, block it at the network level, and monitor for related infrastructure using the same IP, registrar, or nameserver patterns. The domain’s current offline status may be temporary; continuous monitoring is recommended.