inthelinesofkakaooo[.]pages[.]dev

PhishDestroy identifies an active crypto drainer campaign operating on the domain inthelinesofkakaooo.pages.dev. The threat is classified as a generic phishing campaign with an elevated risk level, currently active as of seed b20b34. This domain impersonates Kakao, a popular messaging and digital platform, to deceive users into connecting their cryptocurrency wallets under false pretenses. The campaign is designed to harvest wallet credentials and drain digital assets from unsuspecting victims.

This domain was flagged by 1 of 95 VirusTotal security vendors, indicating limited but present detection. It resolves to IP address 188.114.96.3 and is registered through Cloudflare, Inc. The domain operates with a Let's Encrypt SSL certificate, which may contribute to a false sense of legitimacy. At the time of analysis, no blocklist count or trust score data was available for this specific domain. The lack of widespread detection suggests this campaign may be newly operational or actively evading security measures.

Given the elevated risk level and the domain's current activity, PhishDestroy recommends immediate caution when encountering inthelinesofkakaooo.pages.dev. Users should avoid interacting with this domain, especially if prompted for wallet connections or login credentials. Verify the legitimacy of any Kakao-related links or websites by cross-referencing official sources or using PhishDestroy's verification tools. Additionally, users who suspect they have interacted with this domain should disconnect their wallets, revoke any suspicious permissions, and consider transferring remaining assets to a secure wallet. Security teams and organizations are advised to block this domain at the network level and monitor for any associated indicators of compromise.