enjin-io[.]pages[.]dev

PhishDestroy identifies the domain enjin-io.pages.dev as hosting an active crypto drainer campaign, attempting to deceive users into connecting wallets and draining cryptocurrency assets.

This domain was flagged by PhishDestroy’s automated threat intelligence pipeline, with VirusTotal showing 0/95 detections at time of analysis. The domain is registered through Cloudflare, Inc., resolves to IP 188.114.96.3, and operates under Google Trust Services SSL certificates. The subdomain (pages.dev) is a legitimate Cloudflare Pages domain, which threat actors routinely abuse to host malicious content. No evidence of prior blocklisting or low trust scores have been recorded at this stage, but preliminary analysis suggests recent deployment given the absence of historical detections.

Users should avoid interacting with enjin-io.pages.dev or any unsolicited links referencing 'Enjin' hosted on pages.dev. Always verify domains via official Enjin communication channels and use PhishDestroy’s real-time domain verification tool before clicking or entering credentials. Enable hardware wallet signing for transactions, revoke suspicious smart contract approvals, and monitor wallet activity for unauthorized transfers. If exposed, immediately disconnect wallets, transfer remaining assets to a clean wallet, and report to Enjin security and PhishDestroy for further analysis.