poko[.]bet

PhishDestroy identifies poko.bet as an active crypto drainer scam site currently under investigation by cybersecurity analysts. The domain is designed to deceive users into connecting cryptocurrency wallets under false pretenses, with the ultimate goal of draining digital assets. As of the latest assessment, the status remains active, indicating ongoing malicious activity and potential exposure to unsuspecting victims.

This domain was flagged by 1 of 95 VirusTotal vendors, indicating it has not yet been widely detected by security tools despite its malicious intent. Registered through Porkbun LLC, poko.bet resolves to IP address 188.114.97.3 and was created on May 15, 2025. The domain holds a valid SSL certificate issued by Google Trust Services, which may lend it an air of legitimacy to unsuspecting users. However, the lack of detections and recent creation date suggest it is a newly deployed threat designed to evade early-stage detection mechanisms.

The current risk level is classified as under investigation, but the absence of VirusTotal detections does not equate to safety. Users who have interacted with poko.bet—particularly those who connected cryptocurrency wallets or entered sensitive information—are strongly advised to revoke any connected wallet permissions immediately and transfer remaining assets to a secure, offline wallet. Monitor blockchain transactions for unauthorized activity and consider reporting the domain to your organization’s security team or relevant authorities such as the FBI IC3 or local cybercrime units. Organizations should block the domain and IP at the network level to prevent further exposure. Exercise heightened caution with newly registered domains, especially those claiming to offer crypto-related services, and verify legitimacy through official channels before any interaction.