dev-ldgrlive-wllt[.]pages[.]dev

PhishDestroy identifies dev-ldgrlive-wllt.pages.dev as a domain involved in credential harvesting phishing attacks specifically targeting cryptocurrency wallet users. The domain attempts to deceive victims into submitting sensitive login credentials under the guise of a legitimate wallet service, placing user funds and personal information at significant risk.

This domain is registered through Cloudflare, Inc., with an SSL certificate issued by Google Trust Services, lending it a facade of legitimacy. Despite thorough scanning, VirusTotal reports 0 detections out of 95 antivirus engines, indicating the threat is currently evading automated detection tools. The domain resolves to IP address 172.66.44.174 and remains active with its risk level under investigation. There is no present record of public blocklist listings, which requires heightened caution given the absence of early warning flags.

Users who have interacted with dev-ldgrlive-wllt.pages.dev should immediately cease any input of credentials and monitor their wallet accounts for unauthorized access or suspicious activity. It is advised to change passwords and enable multifactor authentication where possible. Reporting the incident to security teams and using trusted wallet services are essential steps to mitigate potential losses. Continued vigilance and verification of domain legitimacy before entering sensitive data are crucial to avoid falling victim to this ongoing credential harvesting threat.