ldegers-live[.]pages[.]dev

PhishDestroy identifies ldegers-live.pages.dev as an active crypto drainer phishing domain currently under investigation. This deceptive site is designed to trick users into connecting crypto wallets under the guise of a legitimate service, potentially resulting in unauthorized fund transfers. The threat remains active and is being closely monitored by security analysts for further indicators of compromise.

This domain was flagged by 3 of 95 VirusTotal vendors as of the latest scan, indicating that signature-based detection engines have not yet identified its malicious payload. Registered through Cloudflare, Inc., ldegers-live.pages.dev resolves to IP address 188.114.96.3 and operates under a Google Trust Services SSL certificate, which may lend false legitimacy to unsuspecting users. The domain’s infrastructure suggests the use of reputable hosting and certificate authorities to evade initial scrutiny, complicating early-stage detection efforts.

Users are strongly advised to avoid interacting with ldegers-live.pages.dev and to treat any wallet connection prompts originating from this domain as high-risk. PhishDestroy recommends reporting any encounters with this domain and enabling real-time phishing protection on all crypto-related platforms. Security teams should monitor network traffic for connections to 188.114.96.3 and consider blocking the associated SSL certificate fingerprint to prevent potential fund loss. Immediate action is critical to mitigate exposure to this evolving threat.