oraidex-dis[.]pages[.]dev

PhishDestroy identifies oraidex-dis.pages.dev (seed 844115) as a live fake cryptocurrency exchange portal designed to harvest wallet credentials and seed phrases. The site poses as an upgrade of the legitimate Oraidex platform, luring users to connect their wallets to drain funds. Since going active, it has avoided signature-based detection engines. This domain was flagged by PhishDestroy with a current risk level of under_investigation. Resolution maps to IP 172.66.47.160 via Cloudflare, Inc. registrar and leverages a Google Trust Services SSL certificate. VirusTotal shows 0 detections out of 95 engines at the time of analysis. No third-party blocklists have flagged the domain yet, and reputation engines rate it as neutral pending further behavioral telemetry. Users must treat oraidex-dis.pages.dev as hostile. Never click links, download files, or connect wallets to the site. If an interaction already occurred, revoke connected wallet permissions immediately in your wallet software, transfer remaining assets to a new address, and scan devices for malware. Report the domain to your antivirus vendor and block 172.66.47.160 at the network perimeter. Share wallet transaction hashes and connected wallet addresses on PhishDestroy’s report form to accelerate deactivation.