app-pocketnetwork[.]pages[.]dev

PhishDestroy identifies app-pocketnetwork.pages.dev as an active crypto drainer posing as Pocket Network’s official app. This domain was flagged under under_investigation status due to its malicious intent to siphon cryptocurrency wallets. The threat is confirmed by its use of deceptive branding, leveraging Pocket Network’s reputation to trick users into connecting their wallets under false pretenses. This domain resolves to IP 188.114.97.3 and operates under Cloudflare’s infrastructure, registered through Cloudflare, Inc. Notably, it holds a Google Trust Services SSL certificate, which may lend false legitimacy to unsuspecting users. VirusTotal currently lists 0/95 detections, indicating it has not yet been widely flagged by antivirus engines. The domain’s association with Pocket Network—a decentralized RPC network—raises alarms, as threat actors frequently impersonate blockchain projects to exploit wallet connections. Mitigation requires immediate action: users should avoid interacting with app-pocketnetwork.pages.dev entirely. If exposed, revoke any connected wallet permissions via blockchain explorers (e.g., Etherscan, BscScan) and transfer remaining assets to a clean wallet. Blocklists and security tools should flag this domain by its IP (188.114.97.3) and Cloudflare-associated domains. For layered defense, enable wallet connection alerts and use PhishDestroy’s real-time verification checks before granting permissions.