live-ledger-us-azt[.]pages[.]dev

PhishDestroy identifies the domain live-ledger-us-azt.pages.dev as a live crypto_drainer phishing page posing as the official Ledger Live interface. Victims who connect a wallet are prompted to sign a malicious permit message that drains tokens to attacker-controlled addresses. The site resolves to IP 188.114.97.3 and presents a Google Trust Services SSL certificate, lending false legitimacy while evading immediate detection. This domain was flagged through seed f6e347 with zero antivirus detections (3/95) on VirusTotal, indicating limited coverage by current signature-based defenses. It is registered via Cloudflare, Inc. and hosted on Cloudflare Pages, leveraging the platform’s infrastructure to remain agile and avoid traditional takedown routes. As of this investigation, the domain remains active and has not yet been blocked by major threat intelligence platforms, increasing exposure risk to cryptocurrency users.

If you visited live-ledger-us-azt.pages.dev, immediately revoke any wallet permissions granted via the site using tools like revoke.cash or your wallet’s built-in permission manager. Disconnect the suspicious site, transfer remaining assets to a newly generated wallet, and consider monitoring on-chain activity for unauthorized transfers. Report the domain to your wallet provider and consider filing an abuse report with Cloudflare using their abuse form at cloudflare.com/abuse. Do not interact further with any links or QR codes associated with this domain.