en-ldgr-live[.]pages[.]dev

PhishDestroy identifies en-ldgr-live.pages.dev as an active crypto drainer campaign (seed: 7feba5). The domain mimics legitimate landing pages to trick users into connecting cryptocurrency wallets, enabling unauthorized fund transfers. This is a high-risk threat, and users should avoid interacting with the site entirely. The domain is part of a rapidly evolving campaign targeting unsuspecting investors and traders.

This domain was flagged based on multiple technical indicators. It resolves to IP 188.114.96.3 and uses a Google Trust Services SSL certificate, which may lend false legitimacy. VirusTotal currently shows 0 detections out of 95 engines, indicating this campaign has evaded automated detection systems. The domain is registered through Cloudflare, Inc., and was created recently, which is consistent with phishing infrastructure designed for short operational lifespans. These characteristics suggest an advanced and stealthy threat actor is behind this campaign.

If you visited en-ldgr-live.pages.dev, disconnect your cryptocurrency wallet immediately and revoke any permissions granted to suspicious domains. Do not enter any credentials or connect wallets to unknown sites. Use PhishDestroy’s verification tool to check the domain’s status. Report the domain to your wallet provider and relevant cybersecurity platforms. Stay vigilant for unusual transactions and enable multi-factor authentication where possible. Monitor your wallet for any unauthorized activity and consider transferring assets to a secure, offline wallet if you suspect compromise.