# ask-wallet-ldgr.pages.dev — SUSPICIOUS > ask-wallet-ldgr.pages.dev impersonates a crypto wallet service to deploy a crypto drainer via a malicious Cloudflare page. ## Summary PhishDestroy identifies ask-wallet-ldgr.pages.dev as an active crypto drainer domain posing as a legitimate crypto wallet service. This fraudulent domain is designed to trick users into connecting their crypto wallets, enabling the drainer to steal funds upon authorization. This domain was flagged by only 1 out of 95 VirusTotal security vendors, is registered through Cloudflare, Inc., and resolves to IP 172.66.47.56. The use of Google Trust Services SSL certificates adds a false sense of legitimacy, commonly exploited by threat actors to bypass initial security scrutiny. If you visited ask-wallet-ldgr.pages.dev, immediately revoke any wallet connections, transfer remaining funds to a secure wallet, and scan your device for malware. Report the domain to your antivirus provider and block it to prevent further exposure. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 172.66.47.56 ## Detection Status - VirusTotal: 1 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/5f2fc1e7-9a9d-47d2-acce-a2f3eaaa705f - PhishDestroy: https://phishdestroy.io/domain/ask-wallet-ldgr.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/ask-wallet-ldgr.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/ask-wallet-ldgr.pages.dev/ Last updated: 2026-04-01