dekstop-ldgerlive-app[.]pages[.]dev

PhishDestroy identifies dekstop-ldgerlive-app.pages.dev as an active crypto drainer domain under investigation for harvesting cryptocurrency wallet credentials and funds. This fraudulent website mimics legitimate financial services to trick victims into connecting their wallets or entering sensitive information. Security researchers note this domain was registered through Cloudflare, Inc. and resolves to IP 188.114.96.3, which is associated with Google Trust Services SSL certificates commonly abused in credential theft campaigns. The domain remains undetected by 95 security vendors on VirusTotal as of current analysis, highlighting the evolving nature of this threat. This domain exhibits multiple indicators of a crypto drainer operation. The use of Google Trust Services SSL certificates (valid as of assessment) suggests an attempt to appear legitimate to unsuspecting users. The domain leverages Cloudflare's infrastructure to host malicious content, complicating takedown efforts. Analysis shows zero detections on VirusTotal despite active deployment, indicating a newly emerged threat with potential to evade traditional security measures. The pages.dev subdomain suggests an attempt to abuse legitimate hosting services to distribute malicious payloads. Users who visited dekstop-ldgerlive-app.pages.dev should immediately disconnect any connected cryptocurrency wallets and revoke permissions granted to this domain. Scan all devices for malware and monitor financial accounts for unauthorized transactions. Change passwords for accounts that may have been exposed, particularly if the same credentials were reused elsewhere. Report this domain to your security team or platform provider to aid in takedown efforts. Exercise extreme caution with any unsolicited financial service links, especially those hosted on pages.dev domains.