en-ldger-start-guid[.]pages[.]dev

This domain poses a significant risk as a crypto drainer, designed to trick users into connecting cryptocurrency wallets and steal funds without detection. Sites like this often mimic legitimate services, such as wallet interfaces or exchange portals, to deceive visitors into approving malicious transactions. Once a wallet is connected, the drainer can silently transfer funds to attacker-controlled addresses, leaving victims unaware until it's too late.

PhishDestroy identifies this domain as actively malicious. The site was registered through Cloudflare, Inc., and resolves to IP 172.66.45.32, which is hosted on Cloudflare Pages. Notably, its SSL certificate is issued by Google Trust Services, a tactic often used to appear legitimate. Despite this, VirusTotal currently shows 2 out of 95 security vendors flagging the domain, highlighting how new or evasive threats can slip past initial detection.

If you visited en-ldger-start-guid.pages.dev, disconnect your wallet immediately and revoke any permissions granted to suspicious sites. Do not approve transactions or enter sensitive information. Scan your device for malware and consider rotating wallet credentials as a precaution. Report the domain to PhishDestroy to help block future attacks.