# taboo-io.pages.dev — SUSPICIOUS

> PhishDestroy warns taboo-io.pages.dev is a live crypto drainer impersonating a legitimate service with Google Trust Services SSL (0/95 VirusTotal detections).

## Summary
PhishDestroy identifies taboo-io.pages.dev as a recently activated crypto drainer phishing domain mimicking a legitimate taboo-io service under Cloudflare Pages hosting. The domain employs a generic phishing kit designed to deceive users into connecting crypto wallets under the false pretense of accessing adult content or restricted material. This attack pattern is consistent with modern cryptocurrency drainer operations that exploit social engineering to trigger unauthorized token and NFT transfers.  

This domain resolves to IP address 172.66.47.170 and is registered through Cloudflare, Inc., leveraging Cloudflare Pages for rapid deployment. The SSL certificate is issued by Google Trust Services, which may lull users into a false sense of security. As of this analysis, the domain shows 0 detections out of 95 VirusTotal scanners and remains unflagged on Google Safe Browsing (GSB status: clean). It has not yet been listed on major blocklists such as PhishTank or OpenPhish, indicating a new or stealthy campaign still in early propagation.  

The domain is currently active and under investigation with a status of 'under_investigation' and a unique seed identifier 012a9b assigned by PhishDestroy’s automated pipeline. Immediate response actions include continuous monitoring, signature updates for detection tools, and coordination with Cloudflare’s Trust & Safety team to mitigate hosting abuse. While initial risk is assessed as emerging due to low detection coverage, the use of Google-trusted SSL and Cloudflare infrastructure increases potential reach. Users are strongly advised to verify any taboo-io.pages.dev link using PhishDestroy and avoid connecting wallets to unverified websites.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.170

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2256f2ea-91db-4a39-9a1c-6e2943a13af0
- PhishDestroy: https://phishdestroy.io/domain/taboo-io.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/taboo-io.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/taboo-io.pages.dev/
Last updated: 2026-03-28