ton-incinerator[.]pages[.]dev

PhishDestroy identifies ton-incinerator.pages.dev as a live crypto drainer posing under the guise of TON blockchain services. The domain is currently active and classified under the specific threat of crypto drainer, which involves unauthorized extraction of cryptocurrency assets from victims’ wallets. The identity deception targets users familiar with the TON (The Open Network) blockchain ecosystem, leveraging trust in the platform to facilitate unauthorized fund transfers.

This domain was flagged by 6 of 95 VirusTotal security vendors, registered through Cloudflare, Inc., and resolves to IP address 188.114.97.3. The domain has been identified on 1 security blocklist and holds an SSL certificate issued by Google Trust Services. The unique seed identifier for this report is c76bbb, denoting its validated intelligence classification.

ton-incinerator.pages.dev remains active and poses an elevated risk to cryptocurrency users, particularly those interacting with TON-based platforms. Users should avoid accessing this domain and immediately revoke any associated site permissions from their wallets. Security teams are advised to block the domain at the network level and update threat intelligence feeds to include this entry. Report this domain to relevant crypto security communities and wallet providers for further mitigation.