# onchain-flaredex.pages.dev — SUSPICIOUS

> PhishDestroy identifies onchain-flaredex.pages.dev as a crypto drainer phishing domain flagged by 4 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies onchain-flaredex.pages.dev as an active crypto drainer phishing domain impersonating FlareDEX. The domain is currently operational and distributing malicious payloads to deceive users into connecting crypto wallets, resulting in unauthorized fund transfers. This threat is classified as elevated due to its active status and the potential for financial harm to cryptocurrency users.

This domain resolves to IP address 188.114.96.3 and was registered through Cloudflare, Inc. It holds a valid SSL certificate issued by Google Trust Services, which may contribute to a false sense of legitimacy. PhishDestroy flags this domain as suspicious, with 4 of 95 VirusTotal security vendors detecting malicious activity, indicating a moderate but concerning detection rate. The domain’s infrastructure is hosted on Cloudflare’s network, a common tactic among threat actors to obscure their true location and evade detection.

PhishDestroy strongly advises users to avoid interacting with onchain-flaredex.pages.dev or any associated links, as it poses a direct financial risk to cryptocurrency holders. Users who may have already engaged with this domain should immediately disconnect their wallets, revoke any unauthorized permissions, and transfer remaining assets to a secure wallet. To verify the safety of domains before interaction, users are encouraged to utilize PhishDestroy’s real-time threat intelligence platform for accurate and actionable security assessments.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/48e80eb5-e629-4f65-b97e-70b1778dc050
- PhishDestroy: https://phishdestroy.io/domain/onchain-flaredex.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/onchain-flaredex.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/onchain-flaredex.pages.dev/
Last updated: 2026-03-22