lg-live-walle-en-us[.]pages[.]dev

This domain is currently under investigation for cryptocurrency wallet phishing activity, a threat type targeting users through fraudulent wallet interfaces. The risk assessment remains provisional pending further analysis, though initial indicators suggest malicious intent through impersonation of legitimate wallet services. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc., with a creation date of April 03, 2026, an anomalous timestamp likely indicative of domain squatting or backdating. It resolves to the IP address 172.66.47.77 and is currently listed on one security blocklist (PhishDestroy). Detection engines report 0 out of 95 flags on VirusTotal, while the Gridinsoft trust score stands at 0/100. The SSL certificate is issued by Google Trust Services, and the page title explicitly states 'Suspected phishing site | Cloudflare,' further corroborating the phishing classification. Mitigation measures for this threat type include immediate blocking of the domain and its associated IP address (172.66.47.77) at the network perimeter. Users should verify wallet interfaces by cross-referencing official domains and enabling multi-factor authentication for cryptocurrency transactions. Security teams are advised to monitor for similar subdomain patterns (e.g., *-walle-*.pages.dev) and implement real-time phishing detection rules targeting cryptocurrency-related keywords. Given the zero-detection status on VirusTotal, heuristic analysis of behavioral indicators—such as form submission endpoints or wallet address spoofing—is recommended for proactive defense.