# cobo-wallet-secure.pages.dev — MALICIOUS

> Blocked domain cobo-wallet-secure.pages.dev flagged by Google as a crypto drainer with 11/95 VirusTotal detections.

## Summary
PhishDestroy identifies cobo-wallet-secure.pages.dev as a live crypto-draining site. Anyone visiting risks losing all funds stored in connected wallets because the page silently drains tokens via malicious scripts. This high-risk domain is already on Google Safe Browsing’s SOCIAL_ENGINEERING list and resolves to IP 188.114.97.3.


The domain was first created within the past month and is currently registered through Cloudflare, Inc. VirusTotal shows 11 out of 95 participating antivirus engines now detect the page as malicious or suspicious, confirming the threat has rapidly grown since launch.


If you visited this site, immediately disconnect your wallet from any dApps, revoke any token approvals you granted, and move your remaining assets to a fresh wallet. Then run a full antivirus scan and check whether any approvals were used without your consent via blockchain explorers such as Etherscan or Polygonscan. Report the domain to PhishDestroy so it can be blocked for others.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 11 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/60b33929-7e1b-4177-ae73-4508796a6601
- PhishDestroy: https://phishdestroy.io/domain/cobo-wallet-secure.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/cobo-wallet-secure.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cobo-wallet-secure.pages.dev/
Last updated: 2026-03-22