# defi-live-us-en.pages.dev — SUSPICIOUS

> Phishing page defi-live-us-en.pages.dev is a crypto drainer scanning 0/95 on VirusTotal, hosted via Cloudflare.

## Summary
defi-live-us-en.pages.dev has been identified by PhishDestroy as an active crypto drainer posing as a legitimate DeFi platform. The domain mimics a US-focused live interface, tricking cryptocurrency users into connecting wallets and authorizing malicious token transfers. Technical analysis reveals the page leverages a Google Trust Services SSL certificate and resolves to IP 172.66.47.105.  

This domain has not yet been flagged by security scanners, evidenced by VirusTotal’s 0 out of 95 detections. PhishDestroy’s investigation ties this malicious infrastructure to a recently registered Cloudflare Pages instance, indicating opportunistic abuse of legitimate hosting services to circumvent traditional defenses. The absence of detections suggests low antivirus coverage, potentially exposing unaware users to undetected credential and token theft.  

If you visited defi-live-us-en.pages.dev, immediately disconnect your wallet and revoke any unauthorized permissions via tools like revoke.cash or your wallet’s built-in allowance manager. Scan your device with updated antivirus software and monitor blockchain transactions for suspicious transfers. Report your activity to your wallet provider and any cryptocurrency exchanges linked to the site to aid in takedown efforts and protect others.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.105

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/defi-live-us-en.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/defi-live-us-en.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/defi-live-us-en.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/defi-live-us-en.pages.dev/
Last updated: 2026-04-02