en-live-legr-bxl[.]pages[.]dev

PhishDestroy identifies en-live-legr-bxl.pages.dev as a crypto drainer phishing domain currently under investigation for active credential theft campaigns. This site mimics legitimate services to trick users into connecting crypto wallets or entering seed phrases, resulting in asset drain attacks. The threat relies on social engineering rather than exploiting technical vulnerabilities, making user vigilance the primary defense. This domain was flagged by PhishDestroy with 2 out of 95 VirusTotal detections as of the latest scan. It was registered through Cloudflare, Inc. and resolves to IP address 188.114.96.3 using a Google Trust Services SSL certificate. The domain uses a Cloudflare Pages.dev subdomain structure, which attackers frequently exploit to quickly deploy malicious sites while hiding behind legitimate infrastructure. If you visited this site, immediately disconnect any connected crypto wallets and transfer remaining assets to a clean wallet. Do not enter any credentials or seed phrases. Scan your device with updated antivirus software and consider revoking any permissions granted to unknown domains. Report the domain to your wallet provider and relevant security platforms immediately.