linkhoki-10[.]pages[.]dev

PhishDestroy identifies linkhoki-10.pages.dev as a live crypto-drainer site hosting fraudulent giveaways to siphon digital assets. Users who connect wallets risk immediate token theft via smart-contract approvals. Cloudflare fronted and Let’s Encrypt SSL suggests the attacker wants traffic to look legitimate, but community telemetry shows zero VirusTotal detections as of the seed 2b48da snapshot. Technical artifacts point to a recently spun phishing kit: the domain resolves to 188.114.96.3 and is served via Cloudflare Pages, a fast-turnaround hosting path often abused for “time-bound” scams. This domain was flagged for generic phishing with a crypto-drainer payload on day one. Analysis shows zero anti-virus engines currently flagging it, underscoring the lag between first deployment and broader signature updates. The Let’s Encrypt certificate adds a veneer of authenticity, but the age of the certificate and registrar (Cloudflare, Inc.) are consistent with newly created scam infrastructure rather than long-standing services. Registrant privacy is enabled, masking operator details and complicating takedowns. If you already visited linkhoki-10.pages.dev, immediately revoke any wallet-connected approvals using tools like revoke.cash or your wallet’s built-in “disconnect dApp” function. Do not sign further transactions or supply seed phrases. Report the domain to your wallet provider or exchange abuse desk and optionally submit it to PhishDestroy’s public feed for faster community blocking. Monitor connected wallets for suspicious transfers over the next 72 hours; early detection can limit losses.