coinorder[.]pages[.]dev

coinorder.pages.dev poses an immediate risk as a crypto-draining phishing site that quietly steals digital assets without victims noticing a theft until wallets are empty. The site tricks users into connecting their wallets under the guise of an order page, then drains tokens via malicious smart-contract approvals and signature requests. Because the drainer runs in the background after a fake “connect wallet” click, most users miss the theft until balances disappear. PhishDestroy analysts flagged this domain after its 0/95 VirusTotal score revealed zero detections at the time of investigation; the domain was registered through Cloudflare, Inc. on an unknown date and resolves to IP 188.114.97.3 under a Google Trust Services SSL certificate. Such low detection rates are typical of newly spawned crypto drainers that avoid legacy antivirus engines by operating exclusively in web3 contexts. If you visited coinorder.pages.dev, immediately disconnect your wallet, revoke any token approvals via tools like Revoke.cash or Rabby’s approval manager, and transfer remaining assets to a fresh wallet. Scan your device with Malwarebytes and Bitdefender, reset browser extensions, and change passwords stored in the browser. Report the incident to your wallet provider and file a complaint with your local cybercrime unit while sharing the domain on PhishDestroy to help others avoid the same trap.