# dadxczx5.pages.dev — MALICIOUS

> PhishDestroy flags dadxczx5.pages.dev for 12/95 vendors detecting generic phish targeting crypto users. Check the full report.

## Summary
PhishDestroy identifies that dadxczx5.pages.dev is actively hosting a cryptocurrency-giveaway scam designed to trick visitors into connecting their digital wallets. The page mimics a legitimate-looking promotional event, complete with countdown timers and fabricated social proof, aiming to harvest wallet credentials or drain funds directly. Users arriving via spoofed links or malvertisements may be prompted to “verify” their wallet by signing a malicious transaction, which can lead to irreversible asset loss.  This domain was flagged after being suspended by ScamSniffer and blocked by one additional security provider. VirusTotal analysis reveals detection by 12 out of 95 participating antivirus engines, including reputable scam intelligence feeds. The domain was registered through Cloudflare, Inc., leveraging Google Trust Services to issue its SSL certificate, and resolves to the IP address 188.114.96.3. While no creation date was specified in the record, the combination of low detection age and rapid blocklisting indicates a recently deployed campaign.  If you accessed dadxczx5.pages.dev or entered any credentials or wallet signatures, stop all cryptocurrency transfers immediately. Disconnect your wallet from any open browser sessions, revoke any recently approved permissions through your wallet’s settings, and run a malware scan on connected devices. Report the domain to your wallet provider and consider transferring remaining assets to a newly generated, offline wallet if compromise is suspected. Always verify giveaway links by cross-checking official brand domains and using multi-factor authentication on critical accounts.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 12 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["ScamSniffer"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/69c14af4-dcbe-4140-bceb-126e0bc99062
- PhishDestroy: https://phishdestroy.io/domain/dadxczx5.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/dadxczx5.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/dadxczx5.pages.dev/
Last updated: 2026-04-13