ldgr-safe-live[.]pages[.]dev

PhishDestroy identifies ldgr-safe-live.pages.dev as a high-risk cryptocurrency drainer scam active on Cloudflare Pages. The domain masquerades as a legitimate service to trick users into connecting cryptocurrency wallets, enabling unauthorized fund transfers. Security vendors widely flag this domain for malicious behavior, with 14 out of 95 VirusTotal scanners detecting threats. The domain leverages Cloudflare's infrastructure and Google Trust Services for SSL certificates, exploiting trusted providers to appear legitimate. No specific drainer kit was identified in open-source intelligence, but the domain's association with cryptocurrency scams suggests it uses custom or commoditized drainer scripts to siphon funds from compromised wallets.

Technical indicators for ldgr-safe-live.pages.dev include a VirusTotal detection rate of 14/95 security vendors, a Cloudflare registrar, and a resolved IP address of 172.66.44.177. Google Safe Browsing classifies the domain as SOCIAL_ENGINEERING, indicating deception-based threats. While the exact creation date is unknown, the domain's recent activity and active status suggest it is a newly deployed threat. The domain remains unblocked by most browsers but is flagged by security tools, highlighting the need for proactive user caution. Open-source blocklists have not widely adopted this domain, leaving users vulnerable to exposure.

As of the latest assessment, ldgr-safe-live.pages.dev remains active and poses an ongoing risk to cryptocurrency users. Immediate actions include blocking the domain at the network level and avoiding any interaction with the site. Users should verify the legitimacy of any crypto-related service independently, using official channels and trusted sources. The remaining risk is high due to the domain's active status and the potential for new drainer campaigns to emerge under similar infrastructure. Continuous monitoring and user education are critical to mitigating the threat posed by this domain.