# abra-xas-wallet-usa.pages.dev — SUSPICIOUS

> PhishDestroy identifies abra-xas-wallet-usa.pages.dev as a crypto drainer site with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies abra-xas-wallet-usa.pages.dev as a suspected crypto drainer impersonating a cryptocurrency wallet service. This domain appears designed to trick users into connecting their crypto wallets and then silently drain funds through malicious smart contract interactions. The site promotes itself as a legitimate wallet but is likely deployed to harvest private keys or seed phrases under false pretenses.  This domain was flagged with a crypto drainer signature and is currently under investigation. VirusTotal detected 0/95 security engines flagged this domain as malicious as of the latest scan. It was registered through Cloudflare, Inc. using a Google Trust Services SSL certificate, and resolves to IP address 172.66.47.81. The seed identifier for this tracking record is 00e599, used to maintain consistent case context across investigations.  If you visited abra-xas-wallet-usa.pages.dev, disconnect your wallet immediately using your wallet’s emergency disconnect feature or by revoking suspicious permissions via Etherscan or similar blockchain explorers. Do not approve any new transaction requests or sign messages from this domain. Scan your device for malware using reputable tools like Malwarebytes or Windows Defender. Report any unauthorized transactions to your wallet provider and local cybercrime units immediately. Change passwords and enable two-factor authentication on all related accounts. Monitor blockchain activity closely for signs of unauthorized transfers.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.81

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/cff16c1d-4c95-4238-a8f0-cc968bcca82b
- PhishDestroy: https://phishdestroy.io/domain/abra-xas-wallet-usa.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/abra-xas-wallet-usa.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/abra-xas-wallet-usa.pages.dev/
Last updated: 2026-03-30