urko-coin[.]pages[.]dev

PhishDestroy identifies urko-coin.pages.dev as an active cryptocurrency drainer campaign. This fraudulent domain mimics a legitimate crypto wallet interface to trick users into connecting wallets and approving malicious token transfers. The threat level is currently under investigation but displays all hallmarks of a high-risk drainer operation targeting digital asset holders.

This domain (urko-coin.pages.dev) resolves to IP 188.114.97.3 through Cloudflare, Inc. registration. VirusTotal shows 1/95 detections with no current blocklist flags. The Google Trust Services SSL certificate adds a false veneer of legitimacy. While no creation date is publicly available for this specific subdomain, its Pages.dev hosting and recent operational patterns align with known cryptocurrency scam infrastructures. The absence of detection suggests this campaign is either extremely new or employs sophisticated evasion tactics against automated scanning systems.

Users must never connect wallets or approve transactions on urko-coin.pages.dev. Crypto drainers operate by tricking users into signing malicious transactions that transfer all wallet assets to attacker-controlled addresses. Always verify URLs through PhishDestroy before any blockchain interaction. Use hardware wallets for transaction approvals whenever possible. Report this domain immediately if encountered while maintaining network isolation to prevent accidental exposure.