# live-walletv.pages.dev — SUSPICIOUS

> live-walletv.pages.dev is a suspected crypto-drainer exploiting wallet drainers to steal digital assets.

## Summary
PhishDestroy identifies live-walletv.pages.dev as a high-priority crypto-draining domain under active investigation for deploying wallet-draining malware. This site masquerades as a legitimate wallet service but is engineered to intercept and siphon cryptocurrency funds from unsuspecting users. Visitors risk irreversible financial losses as intercepted transactions may bypass wallet approval prompts entirely.  

This domain was flagged with a rare combination of technical indicators that demand attention: it resolves to IP 172.66.47.94 and boasts a clean 0/95 VirusTotal detection ratio despite its malicious design. VirusTotal’s lack of detection is particularly alarming given its known association with crypto-draining toolkits. Registered through Cloudflare’s infrastructure and secured with a Google Trust Services SSL certificate, this site enjoys cloud-level anonymity, complicating takedown efforts.  

If you visited live-walletv.pages.dev, disconnect your wallet immediately and revoke any permissions granted during the session. Use reputable blockchain explorers to audit your wallet’s transaction history for unauthorized transfers and consider transferring remaining assets to a freshly generated cold wallet. Avoid reusing wallet addresses linked to this site, monitor on-chain activity closely for 72 hours, and report suspicious transactions to your wallet provider. Consider employing hardware wallets and multi-signature solutions for enhanced protection against similar threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.94

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/55f56843-9dce-47e2-a689-4226485324d3
- PhishDestroy: https://phishdestroy.io/domain/live-walletv.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/live-walletv.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/live-walletv.pages.dev/
Last updated: 2026-03-25