portal-ldgr-live-wallet-cdn[.]pages[.]dev

PhishDestroy identifies portal-ldgr-live-wallet-cdn.pages.dev as an active crypto drainer domain targeting users of digital wallets. This threat is designed to siphon cryptocurrency assets by mimicking legitimate wallet services, potentially deceiving victims into revealing private keys or seed phrases. No specific brand affiliation or known drainer kit is directly linked, but the domain structure and behavior strongly suggest malicious intent aimed at crypto wallet compromise.

Technical indicators for portal-ldgr-live-wallet-cdn.pages.dev include a VirusTotal detection rate of 8 out of 95 security vendors flagging it as malicious. The domain resolves to IP address 172.66.47.33 and is registered through Cloudflare, Inc., leveraging their infrastructure. The SSL certificate is issued by Google Trust Services, which may lend a false sense of security to users. The domain is actively flagged by Google Safe Browsing and appears on multiple blocklists, highlighting its recognized risk. The domain's creation date and other temporal metadata are consistent with recent threat campaigns, reinforcing its elevated risk status.

Currently, portal-ldgr-live-wallet-cdn.pages.dev remains active and poses a significant risk to cryptocurrency holders. Users are strongly advised to avoid interacting with this domain or entering any wallet credentials. Security teams should block access via network filters and update endpoint protection signatures accordingly. Despite some detections, the domain's presence on Cloudflare and valid SSL may mislead users, so heightened vigilance is necessary. Immediate reporting and removal actions are recommended to mitigate further victimization from this crypto draining threat.