ldgor-live[.]pages[.]dev

PhishDestroy flags ldgor-live.pages.dev as an active crypto drainer site, a specific threat targeting cryptocurrency users through deceptive transaction prompts and wallet drainers. This domain leverages Cloudflare Pages to mimic official services, tricking victims into connecting wallets and approving malicious transactions. Immediate action is required to prevent fund loss.

This domain was flagged via automated detection pipelines and shows zero detections on VirusTotal out of 95 engines scanned. Registered through Cloudflare, Inc., it resolves to IP 188.114.97.3 and operates under a valid SSL certificate issued by Google Trust Services. While domain age and creation timestamp remain unverified due to Cloudflare’s privacy protections, the absence of blocklist entries suggests this is a newly activated domain. The combination of a legitimate hosting provider, valid TLS certificate, and zero detections highlights the sophisticated nature of this campaign.

To mitigate risk, users should avoid interacting with ldgor-live.pages.dev entirely. Cryptocurrency users must verify URLs before connecting wallets or approving transactions, and rely on PhishDestroy’s verification system to confirm domain legitimacy. Block network requests to 188.114.97.3 at the firewall level if detected in logs, and report any suspicious wallet connection attempts to PhishDestroy for further analysis.