# ledger-lonedd.pages.dev — SUSPICIOUS

> ledger-lonedd.pages.dev is a crypto drainer impersonating Ledger. Flagged by 0 of 95 VirusTotal vendors, it steals wallets via malicious seed.

## Summary
PhishDestroy identifies ledger-lonedd.pages.dev (seed: 9ca720) as an active crypto drainer impersonating Ledger, currently under investigation with confirmed malicious activity.

This domain resolves to IP 172.66.44.141, registered through Cloudflare, Inc., and utilizes a Google Trust Services SSL certificate. Flagged by 0 of 95 VirusTotal vendors and appearing on 0 established blocklists, it evades immediate detection despite hosting a crypto drainer designed to steal cryptocurrency wallet funds. Technical indicators include a deceptive Ledger branding strategy and a malicious seed facilitating unauthorized transaction signing.

Current status shows active operation, with the domain leveraging Cloudflare’s infrastructure to obscure its origins. PhishDestroy advises immediate blocking of ledger-lonedd.pages.dev, scanning all wallet-related communications for this seed, and verifying any Ledger-related links via PhishDestroy’s real-time threat database. Users interacting with this domain risk irreversible cryptocurrency theft and should prioritize reporting this campaign to mitigate broader exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.141

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/1a7fcd4d-aa60-423f-bce5-013c086a3327
- PhishDestroy: https://phishdestroy.io/domain/ledger-lonedd.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledger-lonedd.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledger-lonedd.pages.dev/
Last updated: 2026-03-22