eng-ldger-og[.]pages[.]dev

PhishDestroy identifies eng-ldger-og.pages.dev as a domain under investigation for hosting a crypto drainer, a type of phishing site designed to steal cryptocurrency funds. The site mimics legitimate services to trick users into connecting wallets or entering private keys. This domain resolves to IP 172.66.45.11 and uses a Google Trust Services SSL certificate, which may falsely imply legitimacy. Cloudflare’s privacy-focused registration masks the operator’s identity, a common tactic among malicious actors. This domain was flagged with 0 detections out of 95 VirusTotal scans, and its registration details confirm its recent creation. It was registered through Cloudflare, Inc., a registrar often chosen to obscure ownership details. The site’s infrastructure and SSL certificate are superficially legitimate but serve as camouflage for its crypto-draining operations. As investigations continue, this domain remains active and poses an ongoing threat to users. If you visited eng-ldger-og.pages.dev, immediately disconnect your wallet from any connected sites and revoke permissions via your wallet’s settings. Do not enter any private keys or seed phrases. Scan your device with updated antivirus software to check for infections. Report the domain to your wallet provider and local cybercrime units. Stay alert: crypto drainers often target users through social media, fake airdrops, or urgent messages promising rewards.