MALICIOUS — HIGH
enjin-io[.]pages[.]dev
PhishDestroy identifies the domain enjin-io.pages.dev as hosting an active crypto drainer campaign, attempting to deceive users into connecting wallets and draining cryptocurrency assets.
- VirusTotal
- 0/91
- Blocklists
- 1 · ScamSniffer
- Disponibilità
- Raggiungibile · accesso limitato · HTTP 403
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
enjin-io.pages.dev — Raggiungibile · accesso limitato (HTTP 403). Tipo di truffa: Crypto Drainer. Riepilogo delle prove: VirusTotal 0/91; URLQuery 1 alert; 1 external blocklist match (ScamSniffer); PhishDestroy score 63/100. Registrar: Cloudflare.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
PhishDestroy identifies the domain enjin-io.pages.dev as hosting an active crypto drainer campaign, attempting to deceive users into connecting wallets and draining cryptocurrency assets.
This domain was flagged by PhishDestroy’s automated threat intelligence pipeline, with VirusTotal showing 0/95 detections at time of analysis. The domain is registered through Cloudflare, Inc., resolves to IP 188.114.96.3, and operates under Google Trust Services SSL certificates. The subdomain (pages.dev) is a legitimate Cloudflare Pages domain, which threat actors routinely abuse to host malicious content. No evidence of prior blocklisting or low trust scores have been recorded at this stage, but preliminary analysis suggests recent deployment given the absence of historical detections.
Users should avoid interacting with enjin-io.pages.dev or any unsolicited links referencing 'Enjin' hosted on pages.dev. Always verify domains via official Enjin communication channels and use PhishDestroy’s real-time domain verification tool before clicking or entering credentials. Enable hardware wallet signing for transactions, revoke suspicious smart contract approvals, and monitor wallet activity for unauthorized transfers. If exposed, immediately disconnect wallets, transfer remaining assets to a clean wallet, and report to Enjin security and PhishDestroy for further analysis.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | eth.drpc.org |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 4 identified
Webflow is Software-as-a-Service (SaaS) for website building and hosting.
webflow.com Confidenza al 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confidenza al 100%Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of enjin-io.pages.dev · checked May 1, 2026
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.