eng-enn-us-lives[.]pages[.]dev

PhishDestroy identifies eng-enn-us-lives.pages.dev as an active crypto drainer domain designed to trick users into connecting cryptocurrency wallets or entering seed phrases. This fraudulent site impersonates legitimate services by mimicking login pages or wallet authorization prompts, aiming to silently drain digital assets from unsuspecting victims. The attackers exploit urgency and visual deception to bypass standard security checks, making it critical for users to verify any unusual links prior to interaction. This domain was flagged under seed 6d75dc as part of ongoing monitoring for emerging crypto threats. This domain was flagged under seed 6d75dc as part of ongoing monitoring for emerging crypto threats. Resolving to IP 172.66.45.6 (Cloudflare infrastructure), eng-enn-us-lives.pages.dev currently evades detection with 13 out of 95 VirusTotal scans flagging it as malicious. Registered through Cloudflare, Inc., it leverages a Google Trust Services SSL certificate to appear legitimate. While the domain’s creation date is undetermined, its use of a *.pages.dev subdomain suggests recent deployment under Cloudflare’s Pages platform, a common tactic for phishing operations seeking rapid turnover to avoid blacklisting. If you visited eng-enn-us-lives.pages.dev, disconnect your wallet immediately, revoke any unauthorized permissions, and scan your device with updated antivirus software. Do not enter seed phrases or private keys under any circumstances. Report the domain to PhishDestroy via seed 6d75dc and notify your wallet provider if unauthorized transactions occurred. Stay vigilant: verify URLs manually, use hardware wallets for critical transactions, and avoid clicking unverified links in emails or social media.