# ledger-live-wallet-swt.pages.dev — MALICIOUS

> Ledger-live-wallet-swt.pages.dev is a high-risk crypto drainer domain, currently offline. Avoid interaction to protect your assets.

## Summary
PhishDestroy identifies ledger-live-wallet-swt.pages.dev as a high-risk crypto drainer domain designed to steal cryptocurrency assets. Classified under crypto-related threats, this domain was used to impersonate legitimate wallet services to deceive victims into revealing sensitive information.

Technical analysis shows the domain was registered on February 21, 2026, through Cloudflare, Inc., leveraging its infrastructure for hosting. VirusTotal flagged this domain by 14 security vendors, and it appears on three security blocklists. The domain’s setup and naming convention align with common tactics used by threat actors to mimic trusted crypto wallet platforms.

Currently, the domain ledger-live-wallet-swt.pages.dev is taken offline and no longer active. PhishDestroy recommends users remain vigilant against similar phishing attempts, especially those impersonating cryptocurrency wallets. Blocking and monitoring such domains is critical to mitigate crypto asset theft risks.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Ledger
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.6
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["vera.ns.cloudflare.com", "arturo.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["Criminal IP", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Gridinsoft", "Kaspersky", "Lionic", "Sophos", "Trustwave", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019bbf64-c923-76bf-9e1f-38ab5b982752.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/b6b6cbd8-5a22-4481-ad61-6bd73822bcea
- PhishDestroy: https://phishdestroy.io/domain/ledger-live-wallet-swt.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledger-live-wallet-swt.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledger-live-wallet-swt.pages.dev/
Last updated: 2026-03-19