# io-tsuite.pages.dev — SUSPICIOUS

> io-tsuite.pages.dev is a crypto drainer scam! VirusTotal flags 0/95 and this domain impersonates legitimate services.

## Summary
PhishDestroy identifies io-tsuite.pages.dev as a crypto drainer scam designed to steal cryptocurrency from unsuspecting users. This malicious domain mimics legitimate cryptocurrency-related services to trick victims into connecting their wallets or entering sensitive credentials. Once engaged, the drainer silently transfers funds to attacker-controlled addresses, often without immediate detection. Security researchers have observed this domain being actively promoted through social engineering tactics, including fake giveaways and fraudulent investment opportunities.


This domain was flagged with a risk level of under_investigation despite having 0/95 detections on VirusTotal as of the latest scan. It is registered through Cloudflare, Inc., and resolves to IP address 172.66.44.140, which is associated with malicious activity. The domain uses a Google Trust Services SSL certificate to appear legitimate, further deceiving potential victims. While the exact creation date is not provided, the active status and lack of blocklist detections suggest it is a relatively new but rapidly evolving threat.


Users who visited io-tsuite.pages.dev should immediately disconnect any connected cryptocurrency wallets and revoke any permissions granted to suspicious websites. Scan your device for malware using reputable antivirus software and consider transferring remaining funds to a secure, hardware-based wallet. Report this domain to PhishDestroy and your local cybersecurity authorities to help prevent further victimization. Avoid interacting with any links or pop-ups from this domain, as they may lead to additional malware infections or financial loss.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.140

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/io-tsuite.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/io-tsuite.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/io-tsuite.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/io-tsuite.pages.dev/
Last updated: 2026-04-04