# wallet-cobo-x.pages.dev — SUSPICIOUS

> PhishDestroy identifies wallet-cobo-x.pages.dev as a crypto drainer scam. This Cloudflare-hosted domain has 0/95 VirusTotal detections.

## Summary
PhishDestroy has flagged wallet-cobo-x.pages.dev as an active crypto drainer domain designed to steal cryptocurrency from unsuspecting users. This fraudulent site masquerades as a legitimate wallet service, tricking victims into connecting their wallets and authorizing malicious transactions. Once connected, the drainer silently transfers funds to attacker-controlled addresses, often draining entire balances within seconds. Users should treat this domain with extreme caution and avoid any interaction.  This domain was flagged by PhishDestroy during routine threat monitoring. Intelligence reveals it was registered through Cloudflare, Inc., resolving to IP 172.66.44.57 with a Google Trust Services SSL certificate. Notably, VirusTotal currently shows 0/95 detections (as of seed 15ebe7), indicating it has evaded most antivirus engines. The domain remains active despite its malicious nature, posing an immediate risk to cryptocurrency holders. Users should verify website legitimacy before connecting wallets or entering credentials.  If you visited wallet-cobo-x.pages.dev or connected your wallet: immediately revoke any unauthorized permissions through your wallet app, transfer remaining funds to a secure wallet, and scan your device for malware. Report the domain to your wallet provider and relevant cybersecurity platforms. Avoid similar domains and always verify URLs through official channels before taking any action involving cryptocurrency.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.57

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/wallet-cobo-x.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/wallet-cobo-x.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/wallet-cobo-x.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/wallet-cobo-x.pages.dev/
Last updated: 2026-04-10