lgr-live-desktop[.]pages[.]dev

PhishDestroy identifies an active crypto drainer hosted at lgr-live-desktop.pages.dev that steals digital assets by tricking users into connecting their wallets. This domain resolves to Cloudflare IP 172.66.44.99 and leverages a Google Trust Services SSL certificate to appear legitimate. Security vendors rate it as elevated risk with only 2 out of 95 flagging it, indicating low detection rates among automated systems. This domain was flagged on 2024-08-15 through automated threat intelligence feeds. It was registered through Cloudflare, Inc. and currently uses the free pages.dev subdomain service. The low VirusTotal score suggests cybercriminals are actively rotating infrastructure to evade detection while targeting cryptocurrency users with fake desktop applications. If you visited this site, immediately revoke any wallet connections in your browser's approved sites list. Do not interact with any wallet prompts or download files from this domain. Clear your browser cache and run a malware scan. Report the domain to your antivirus provider and consider changing passwords if you reused credentials anywhere on this site. Monitor your wallet transactions for unauthorized activity.