# ladxoer-live-app.pages.dev — SUSPICIOUS

> ladxoer-live-app.pages.dev is a crypto drainer with 0/95 VirusTotal detections. This active phishing domain mimics a legitimate live app to steal crypto funds.

## Summary
PhishDestroy identifies ladxoer-live-app.pages.dev as an active crypto drainer site currently under investigation for malicious activity. This domain leverages Cloudflare Pages hosting and a Google Trust Services SSL certificate to appear legitimate while targeting cryptocurrency users. The domain resolves to IP 172.66.44.95 and has not yet been flagged by VirusTotal detections (0/95 engines).  This domain was flagged through automated threat detection mechanisms focusing on crypto drainer infrastructure patterns. The seed identifier 75f84c was associated with this domain during initial triage. Technical analysis reveals it uses Pages.dev hosting infrastructure, which is commonly abused for phishing campaigns due to its legitimate appearance. The Google Trust Services SSL certificate adds to its credibility while the domain remains unflagged in VirusTotal's detection systems. Current risk assessment remains under investigation pending further behavioral analysis.  If you've visited this domain, immediately disconnect from the internet to prevent potential session hijacking. Check your crypto wallets for unauthorized transactions and revoke any connected wallet permissions. Clear browser cache and cookies, then run a full antivirus scan. Consider rotating all cryptocurrency wallet credentials and enabling hardware wallet authentication for future transactions. Report any suspicious transactions to your wallet provider immediately.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.95

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/5e4b4827-c0c5-48e3-8146-50230a43b10f
- PhishDestroy: https://phishdestroy.io/domain/ladxoer-live-app.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ladxoer-live-app.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ladxoer-live-app.pages.dev/
Last updated: 2026-04-12