ledger--live-info[.]pages[.]dev

The domain ledger--live-info.pages.dev is currently classified as a crypto drainer threat. Infrastructure analysis shows the domain resolves to the IP address 188.114.97.3 and uses Cloudflare's DNS infrastructure, with authoritative name servers jasper.ns.cloudflare.com and marge.ns.cloudflare.com. Registration data indicates the domain was provisioned through Cloudflare, Inc., a common registrar for short‑lived malicious sites.

The domain appears on one external security blocklist and is actively blocked by the PhishDestroy filtering service, suggesting that at least one security community has observed malicious activity associated with this name. VirusTotal records show the domain has been submitted to 91 scanning engines, and as of the latest scan no engine has generated a detection; this absence of alerts does not confirm safety and should be interpreted as an inconclusive result pending further behavioral analysis. No public page title, SSL certificate details, HTTP response codes, or content snapshots are available in the shared intelligence, leaving the exact payload and victim interaction model undocumented.

Consequently, the confidence in the specific operational characteristics of the drainer is limited to the observed infrastructure and blocklist presence. Defenders should treat the domain as hostile: add the host to DNS and proxy blocklists, monitor outbound network flows for connections to 188.114.97.3, and enforce strict validation of cryptocurrency transaction requests. Continuous re‑evaluation is advised, as additional telemetry such as page content, SSL fingerprinting, or victim reports may emerge and refine the threat profile.