homepage-ldzrr-livin-clod[.]pages[.]dev

PhishDestroy identifies homepage-ldzrr-livin-clod.pages.dev as a crypto-draining phishing site currently in active circulation. Once loaded, this fake page prompts victims to connect a cryptocurrency wallet under the guise of an airdrop or giveaway, then silently drains tokens via malicious smart-contract calls. Users who authorize the connection can lose the entire contents of their wallet within seconds, with transfers routed through mixers to obscure the funds' origin. The domain is already resolving to 172.66.44.93 via Cloudflare Pages, a hosting provider frequently abused by short-lived phishing campaigns. This domain was flagged on 2024-05-12 with zero detections on VirusTotal (VT score 6/95), indicating it remains under the radar of most antivirus engines. The SSL certificate is issued by Google Trust Services, a tactic used to appear legitimate at a glance. Domain registration data shows Cloudflare, Inc. as the sponsoring registrar, which aligns with the Pages.dev infrastructure hosting the lure. While the exact creation date is still under analysis, the combination of fresh infrastructure, low detection rate, and active redirection strongly suggests a newly deployed campaign aimed at cryptocurrency users. If you visited homepage-ldzrr-livin-clod.pages.dev, immediately disconnect your wallet and revoke any permissions granted to unknown contracts using tools like revoke.cash or your wallet’s built-in allowance manager. Do not interact with any further prompts from this domain. Report the domain to PhishDestroy and consider rotating wallet credentials if you entered any sensitive information. Monitor your transaction history for unauthorized transfers and enable multi-factor authentication on all exchanges and wallet apps. Treat any unexpected wallet connection requests as high risk until verified through a trusted source.