classify-us-lesdger-wallets-us[.]pages[.]dev

PhishDestroy identifies classify-us-lesdger-wallets-us.pages.dev as an active crypto drainer scam targeting cryptocurrency wallet users. This domain is designed to trick victims into connecting their wallets, triggering unauthorized transfers to attacker-controlled addresses. The threat operates under the guise of a legitimate wallet service, tricking users into signing malicious transactions that drain funds without physical withdrawal. This domain was flagged by 7 out of 95 security vendors on VirusTotal, indicating moderate detection but high risk due to active deployment. It was registered through Cloudflare, Inc., resolving to IP 188.114.97.3 with a Google Trust Services SSL certificate for added legitimacy. The use of a .pages.dev subdomain under Cloudflare Pages suggests a low-cost, fast-deployed infrastructure commonly abused by threat actors to host phishing kits and crypto drainers. Users who visited this domain should disconnect any connected wallets immediately and revoke permissions via blockchain explorers or wallet interfaces. Scan devices for malware using reputable AV tools and consider transferring remaining assets to a new, isolated wallet. Report the domain to PhishDestroy and relevant crypto platforms to aid in blacklisting and takedown efforts.