sqr-live-us-com[.]pages[.]dev

PhishDestroy identifies sqr-live-us-com.pages.dev as an active crypto drainer posing as a legitimate login page. The site uses Cloudflare Pages to host a fake interface that tricks visitors into entering cryptocurrency wallet credentials, which are then drained by attackers. This is not a generic phishing page—it is specifically designed to steal private keys and seed phrases from unwary users attempting to access crypto services. This domain was flagged after 1 out of 95 VirusTotal security vendors detected malicious content. It was registered via Cloudflare, Inc. and resolves to IP address 172.66.47.158. The site holds a valid SSL certificate issued by Google Trust Services, which increases its credibility to unsuspecting users. These technical indicators—low detection rate, Cloudflare hosting, and trusted SSL—are commonly abused by threat actors to evade detection and build trust before deploying malicious payloads. If you visited sqr-live-us-com.pages.dev, do not enter any wallet passwords, seed phrases, or private keys. Disconnect from the internet immediately, clear your browser cache, and run a full antivirus scan. If you entered credentials, revoke access to all connected wallets and transfer remaining funds to a secure, offline wallet. Report the domain to PhishDestroy and your wallet provider to help block further abuse. Always verify URLs via official sources before logging in.