wallethashpack[.]pages[.]dev

The domain wallethashpack.pages.dev is a confirmed phishing site specializing in cryptocurrency theft, specifically functioning as a crypto drainer. This type of scam directly targets digital wallets by tricking users into signing malicious transactions, resulting in unauthorized fund transfers. No legitimate brand or drainer kit was identified in this case. As of the latest verification, wallethashpack.pages.dev has been taken offline.

Technical indicators confirm the elevated risk. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Fortinet, while Google Safe Browsing did not detect it. It appears on 1 security blocklist, specifically PhishDestroy. Registered through Cloudflare, Inc. on September 07, 2025, wallethashpack.pages.dev resolves to the IP address 172.66.46.227, hosted on Cloudflare's US-based infrastructure (AS13335). The SSL certificate is issued by Google Trust Services (WE1), and the observed page title was 'Suspected phishing site | Cloudflare'. Technologies detected include HSTS, Cloudflare, and HTTP/3, with a current HTTP status of 403. Gridinsoft assigned a trust score of 0/100 to the domain.

Individuals who interacted with wallethashpack.pages.dev should immediately revoke all token approvals associated with their cryptocurrency wallet to prevent further unauthorized transactions. Funds should be moved to a new, secure wallet. Victims are advised to report the domain to their wallet provider and relevant authorities, such as the FBI’s Internet Crime Complaint Center (IC3) or local cybercrime units. Additionally, monitoring for unusual activity on linked accounts is recommended.