desktop-ledgor-lives[.]pages[.]dev

PhishDestroy identifies desktop-ledgor-lives.pages.dev as an active crypto-draining phishing domain that poses a high risk to cryptocurrency users. The site masquerades as a legitimate login portal to trick visitors into surrendering wallet credentials or seed phrases, enabling attackers to drain assets directly. Security researchers classify it as a generic phishing vector designed to harvest private keys under the guise of a login or verification process, making it particularly dangerous for those engaging with crypto platforms. This domain was flagged after resolving to IP 172.66.46.211 via Cloudflare and received 0 detections across 95 VirusTotal scanners. The domain is registered through Cloudflare, Inc., using a Google Trust Services SSL certificate to appear legitimate. Although currently under investigation, its lack of detection signals it may be newly deployed or actively evolving to evade static analysis. The combination of Cloudflare hosting, a trusted SSL issuer, and zero antivirus coverage makes this a stealthy threat likely targeting crypto enthusiasts. If you visited desktop-ledgor-lives.pages.dev or entered any information, immediately disconnect from the internet, revoke any exposed API keys or permissions, and transfer remaining funds to a new wallet. Scan all devices used for crypto access with updated antivirus tools and consider rotating passwords and credentials across all accounts. Report the domain to PhishDestroy and monitor your wallet activity for unauthorized transactions. Never trust unsolicited links or unfamiliar login pages, even if they appear secured by HTTPS.