# revolution-coredaoorg.pages.dev — SUSPICIOUS

> PhishDestroy flags revolution-coredaoorg.pages.dev as an active crypto drainer phishing domain. VirusTotal shows only 1/95 vendors detected it.

## Summary
PhishDestroy identifies revolution-coredaoorg.pages.dev as an active crypto drainer phishing domain posing as a legitimate CoreDAO service. This domain employs deceptive tactics to trick users into connecting crypto wallets and authorizing unauthorized transactions, resulting in direct asset theft. The threat is classified as elevated due to its operational status and potential for significant financial harm to cryptocurrency holders.  This domain was flagged by PhishDestroy with the following indicators: VirusTotal detection rate of 1 out of 95 security vendors, registered through Cloudflare, Inc., resolving to IP address 188.114.96.3, and secured with a Google Trust Services SSL certificate. The domain is hosted on Google Pages, leveraging the platform’s infrastructure to appear legitimate. Despite low vendor detection, user reports and behavioral analysis confirm active malicious operations. The domain’s structure mimics official CoreDAO branding, increasing the risk of successful impersonation.  To mitigate exposure to this crypto drainer phishing domain, users should avoid accessing or interacting with revolution-coredaoorg.pages.dev. Block the domain and IP address 188.114.96.3 at the network and endpoint levels. Users who may have connected a wallet to this domain should immediately revoke any unauthorized smart contract approvals using tools like revoke.cash or similar blockchain security platforms. Always verify domain URLs and use official sources for cryptocurrency services to prevent credential theft and asset loss.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2aced4f7-16af-4865-9c8a-c7ee37ee8ec8
- PhishDestroy: https://phishdestroy.io/domain/revolution-coredaoorg.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/revolution-coredaoorg.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/revolution-coredaoorg.pages.dev/
Last updated: 2026-03-29