# lzrsfdg34.walletatomic.workers.dev — SUSPICIOUS

> lzrsfdg34.walletatomic.workers.dev is a live crypto-drainer site hosted on Cloudflare Workers. It is flagged by 4 of 95 VirusTotal vendors and resolves to 172.

## Summary
PhishDestroy identifies lzrsfdg34.walletatomic.workers.dev as an active crypto-drainer domain that masquerades as a legitimate wallet service in order to trick users into connecting their cryptocurrency wallets and unknowingly approve malicious token transfers.

This domain was flagged by 4 out of 95 VirusTotal security vendors, uses a Google Trust Services SSL certificate, and is served from Cloudflare’s edge network at IP 172.67.159.161. Cloudflare Workers allows adversaries to spin up malicious sites rapidly, often within hours, exploiting the platform’s legitimate infrastructure to evade conventional blocklists.

If you visited lzrsfdg34.walletatomic.workers.dev, immediately revoke any wallet connections or token approvals you granted through your wallet’s connection settings. Disconnect the site, reset any affected wallet addresses, and consider transferring remaining assets to a new, isolated wallet. Scan your device for malware and enable hardware wallet signing if available to reduce exposure to future drainer sites.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.67.159.161

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d76588fd-6a0d-43a4-84f0-e5b331ac7753
- PhishDestroy: https://phishdestroy.io/domain/lzrsfdg34.walletatomic.workers.dev/
- LLM endpoint: https://phishdestroy.io/domain/lzrsfdg34.walletatomic.workers.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/lzrsfdg34.walletatomic.workers.dev/
Last updated: 2026-03-23