# checkcoin.site — SUSPICIOUS

> checkcoin.site is a live crypto wallet drainer phishing domain with 0/95 VirusTotal detections. Analyze and block this threat now. Check the full report.

## Summary
PhishDestroy identifies an active crypto wallet drainer phishing domain: checkcoin.site. This fraudulent site specifically targets cryptocurrency users, deploying a wallet-draining kit designed to illicitly transfer funds from victims' digital wallets without authorization. No brand impersonation is observed in this campaign, suggesting a standalone malicious infrastructure designed to deceive users directly. The drainer kit automatically initiates unauthorized wallet connection prompts upon access, exploiting common cryptocurrency wallet vulnerabilities to siphon assets once permissions are granted.  This domain was flagged with a 0/95 detection score on VirusTotal as of the latest scan. It was registered through GoDaddy.com, LLC and resolves to IP address 77.245.76.110. The domain was created on April 01, 2026, and secured with a Let’s Encrypt SSL certificate to appear legitimate. It currently remains unblocked by Google Safe Browsing (GSB) and has not been listed on major threat intelligence blocklists, contributing to its elevated risk profile.  PhishDestroy has placed this domain under active investigation due to its active status and the presence of a crypto wallet drainer kit. Users are advised to avoid accessing checkcoin.site, report the domain via phishing reporting platforms, and ensure their systems and cryptocurrency wallets are protected with updated security measures. The remaining risk level is classified as under_investigation pending further forensic analysis and coordinated takedown efforts by cybersecurity authorities.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-01 10:50:10
- Registrar: GoDaddy.com, LLC
- IP: 77.245.76.110

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6417b1e9-c156-4bce-8a16-e45a6e37eddc
- PhishDestroy: https://phishdestroy.io/domain/checkcoin.site/
- LLM endpoint: https://phishdestroy.io/domain/checkcoin.site/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/checkcoin.site/
Last updated: 2026-04-01