download-live-io[.]pages[.]dev

PhishDestroy identifies download-live-io.pages.dev as an active crypto drainer scam designed to steal cryptocurrency from unsuspecting users. This malicious domain mimics legitimate services to trick visitors into connecting crypto wallets or entering seed phrases, which are then drained by threat actors. The site’s false branding and urgency tactics are classic signs of a crypto drainer operation, where attackers pose as trusted entities to facilitate wallet compromises. This domain was flagged due to its suspicious infrastructure and lack of legitimate indicators. It resolves to IP address 172.66.44.190 and uses a Google Trust Services SSL certificate, which attackers often exploit to appear legitimate. Notably, VirusTotal currently shows 2/95 detections, meaning no antivirus engines have flagged it yet, highlighting the importance of proactive verification. The domain is registered through Cloudflare, Inc., which is a legitimate registrar but commonly abused by threat actors to host phishing and malware campaigns. These technical markers suggest this site is part of a broader campaign targeting crypto users. If you visited download-live-io.pages.dev, immediately disconnect your wallet from the site and revoke any unauthorized permissions. Do not enter seed phrases, private keys, or sign any transactions on this domain. Scan your devices for malware using reputable security tools and consider rotating wallet credentials as a precaution. Report the domain to PhishDestroy to help protect others from falling victim to this scam. Always verify URLs and use trusted security resources before interacting with unfamiliar websites.