wallet-lto-network[.]pages[.]dev

The domain wallet-lto-network.pages.dev is a phishing site associated with a crypto drainer threat. It does not impersonate any specific brand nor use a known drainer kit. The site has been taken offline and is currently under investigation for its role in attempting to illicitly drain cryptocurrency assets from victims. Users searching for whether wallet-lto-network.pages.dev is safe or a scam should be aware that it was designed to compromise crypto wallets.

Technical analysis shows that wallet-lto-network.pages.dev was created on February 24, 2024, and is registered through Cloudflare, Inc. It resolves to the IP address 172.66.45.28 located in the US under AS13335 (Cloudflare, Inc.). The SSL certificate is issued by Google Trust Services / WE1, and the domain uses Cloudflare technologies including HSTS and HTTP/3. Despite having zero detections from 0 of 95 VirusTotal vendors and not being flagged by Google Safe Browsing, it appears on three security blocklists: PhishDestroy, ScamSniffer, and Enkrypt. The site returned an HTTP 500 error with a page title of 'Worker threw exception | wallet-lto-network.pages.dev | Cloudflare'.

To protect against threats like the crypto drainer hosted on wallet-lto-network.pages.dev, affected users should immediately revoke any token approvals granted to suspicious sites and transfer remaining funds to a new wallet to prevent further loss. Users should remain vigilant for phishing attempts and report any suspicious activity to security blocklists and relevant authorities. Since the site is offline, caution is advised before interacting with any similar URLs or related domains to avoid falling victim to scams.