income-coin[.]pages[.]dev

PhishDestroy identifies income-coin.pages.dev as an active crypto drainer scam hosted on Cloudflare Pages. This fraudulent site masquerades as a cryptocurrency investment platform, tricking users into connecting wallets to steal digital assets. Unsuspecting victims land here via phishing links, deceptive ads, or social media spam, only to discover their funds vanishing from connected wallets shortly after ‘investment’. This domain was flagged by PhishDestroy with 0 detections on VirusTotal out of 95 engines (as of analysis), registered through Cloudflare Pages and using a Let’s Encrypt SSL certificate. The site resolves to IP address 172.66.47.61 and has not yet been blocked by major security providers, making it a high-risk threat to cryptocurrency users. While no blocklist count is publicly available due to its recent emergence, its technical makeup and intent align with known drainer toolkits targeting vulnerable users. If you visited income-coin.pages.dev or entered any credentials or connected a wallet, immediately disconnect your wallet and revoke any unauthorized permissions using tools like revoke.cash or wallet.darkblock.io. Run a full malware scan on your device and consider transferring remaining assets to a new, clean wallet. Report this domain to PhishDestroy and your local cybercrime unit to help prevent further victimization. Always verify URLs and use dedicated scam verification services before engaging with crypto-related platforms.