guide-liveledgr-public[.]pages[.]dev

PhishDestroy identifies guide-liveledgr-public.pages.dev as an active crypto drainer posing as a legitimate service. This domain leverages a Google Trust Services SSL certificate to appear credible, though its infrastructure (188.114.97.3) is hosted on Cloudflare. The domain remains undetected by most security tools, with VirusTotal currently reporting 11/95 detections, indicating a high-risk, low-signal threat. This domain was flagged through automated analysis of its infrastructure and behavior. The registrar is Cloudflare, Inc., and the IP resolution points to 188.114.97.3, a known hosting provider often abused by malicious actors. Despite its clean reputation in VirusTotal’s scans, the domain’s purpose aligns with cryptocurrency theft, specifically targeting users through fake login portals or wallet connection prompts. The absence of detections suggests this is a newly deployed or carefully obfuscated threat. Users who have visited this domain should immediately disconnect from the site and avoid entering any sensitive information, such as wallet addresses or private keys. If you suspect interaction with this domain, revoke any connected wallet permissions and scan your device for malware. Report the domain to PhishDestroy for further analysis and to prevent others from falling victim to this crypto drainer.