# ton-incinerator.pages.dev — MALICIOUS

> ton-incinerator.pages.dev is a crypto drainer site flagged by 6 of 95 VirusTotal vendors. It impersonates TON blockchain services with elevated risk.

## Summary
PhishDestroy identifies ton-incinerator.pages.dev as a live crypto drainer posing under the guise of TON blockchain services. The domain is currently active and classified under the specific threat of crypto drainer, which involves unauthorized extraction of cryptocurrency assets from victims’ wallets. The identity deception targets users familiar with the TON (The Open Network) blockchain ecosystem, leveraging trust in the platform to facilitate unauthorized fund transfers.

This domain was flagged by 6 of 95 VirusTotal security vendors, registered through Cloudflare, Inc., and resolves to IP address 188.114.97.3. The domain has been identified on 1 security blocklist and holds an SSL certificate issued by Google Trust Services. The unique seed identifier for this report is c76bbb, denoting its validated intelligence classification.

ton-incinerator.pages.dev remains active and poses an elevated risk to cryptocurrency users, particularly those interacting with TON-based platforms. Users should avoid accessing this domain and immediately revoke any associated site permissions from their wallets. Security teams are advised to block the domain at the network level and update threat intelligence feeds to include this entry. Report this domain to relevant crypto security communities and wallet providers for further mitigation.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 6 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["Enkrypt"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/32f27579-e4d2-43fa-9f8a-2daae205fdd9
- PhishDestroy: https://phishdestroy.io/domain/ton-incinerator.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ton-incinerator.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ton-incinerator.pages.dev/
Last updated: 2026-03-28