coinlabs[.]fun

coinlabs.fun is an active crypto drainer domain impersonating the legitimate CoinLab platform, designed to trick users into connecting cryptocurrency wallets and siphoning funds. This site masquerades as a legitimate crypto analytics or trading tool while secretly executing unauthorized transactions to drain connected wallets. Victims may unknowingly approve malicious smart contract interactions, transferring tokens or NFTs to attacker-controlled addresses without realizing the theft until it is too late. PhishDestroy identifies this domain as a high-risk crypto drainer based on multiple technical indicators. VirusTotal currently shows 2 out of 95 security engines detecting this domain, indicating it remains under the radar despite active malicious activity. The domain was registered on June 02, 2025, through Porkbun LLC, a registrar frequently exploited by threat actors for short-lived malicious domains. It resolves to IP address 216.150.1.1 and uses a Let’s Encrypt SSL certificate, which does not validate legitimacy. The newness of the domain (registered in 2025) suggests it was created specifically for this campaign. If you visited coinlabs.fun, disconnect your wallet immediately and revoke any unauthorized permissions using tools like revoke.cash or Etherscan’s token approval checker. Do not interact with any prompts or wallet connection requests on this site. Report the domain to your antivirus provider and relevant crypto security platforms. Monitor your wallet for suspicious transactions and consider transferring remaining assets to a new, secure wallet. Always verify URLs and use bookmarks for trusted platforms to avoid similar threats.