web3-app-live[.]pages[.]dev

This domain, web3-app-live.pages.dev, is under investigation for operating as a cryptocurrency drainer phishing site. Analysis indicates the page was designed to mimic legitimate Web3 applications, tricking users into connecting wallets to malicious smart contracts that execute unauthorized token transfers. As of the latest assessment, the domain has been taken offline, though prior activity suggests it was actively targeting cryptocurrency holders with high-risk financial theft tactics. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc., with a creation date of April 02, 2026. It resolves to the IP address 188.114.97.3 and is associated with an SSL certificate issued by Google Trust Services. Despite its malicious intent, the domain was not flagged by any of the 95 security vendors on VirusTotal at the time of detection. It appears on a single blocklist and holds a Gridinsoft trust score of 0/100, indicating a complete lack of legitimacy. The page title, 'Suspected phishing site | Cloudflare,' further confirms its classification as a security threat. Current status confirms the domain has been rendered inaccessible, though residual risk remains for users who may have interacted with it prior to takedown. Organizations and individuals are advised to block the domain and associated IP (188.114.97.3) at the network level. Cryptocurrency wallet providers should monitor for transactions linked to this domain and alert users who may have connected wallets during its active period. Given the zero-detection status on VirusTotal, reliance on traditional signature-based detection may prove insufficient; behavioral analysis and endpoint monitoring are recommended to identify potential compromise from this threat.