app-dexrp[.]pages[.]dev

PhishDestroy identifies app-dexrp.pages.dev as an active crypto-draining phishing site spun up on 2024-05-08 via Cloudflare Registrar and hosted on IP 188.114.97.3. This domain weaponizes a Google Trust Services SSL certificate to impersonate legitimate DeFi dashboards and trick victims into surrendering wallet seed phrases or private keys. The site has evaded detection so far, registering 0 detections from 95 VirusTotal engines, underscoring its stealth and the need for manual verification before any interaction.

Technical indicators reveal the domain was registered through Cloudflare, Inc. on 2024-05-08 and resolves to IP 188.114.97.3. It employs a valid SSL certificate issued by Google Trust Services, giving it the appearance of legitimacy at first glance. Despite zero detections on VirusTotal as of 2024-05-10, the absence of flags is not a guarantee of safety; threat actors often leverage edge networks and short-lived domains to bypass automated defenses. Users should treat any unsolicited requests to visit app-dexrp.pages.dev as high-risk, especially those involving wallet connections or login prompts.

If you have already visited app-dexrp.pages.dev, disconnect your wallet immediately and revoke any connected permissions using your wallet’s built-in connection manager or tools like revoke.cash. Do not enter any seed phrases or private keys. Scan your device with an updated antivirus and consider rotating wallet addresses if you suspect interaction. Report the incident to PhishDestroy and warn others to avoid this domain. Always verify URLs via trusted bookmarks or official project websites; never follow links from unsolicited messages.