# wallet-org-ldgr.pages.dev — MALICIOUS

> wallet-org-ldgr.pages.dev is a live crypto drainer site flagged by 5/95 VirusTotal vendors. Delivers malware to steal digital assets.

## Summary
PhishDestroy identifies wallet-org-ldgr.pages.dev as an active crypto drainer campaign operating under Cloudflare Pages. The domain impersonates legitimate wallet infrastructure to trick users into connecting wallets and initiating fraudulent transaction approvals. This site is part of a growing trend where threat actors abuse GitHub Pages, Cloudflare R2, and trusted CDNs to host drainer kits and bypass security filters. No specific brand is directly named in available metadata, suggesting a generic wallet impersonation targeting crypto users broadly rather than a single institution.


Exact technical indicators include a VirusTotal detection ratio of 5 out of 95 security vendors, registration via Cloudflare, Inc., and resolution to IP address 172.66.44.115. The domain holds a Google Trust Services SSL certificate, confirming active TLS encryption, and is currently unlisted on Google Safe Browsing (GSB) as of the latest scan. Historical WHOIS data suggests recent domain creation, though not explicitly stated in this report. Given its use of a trusted hosting provider and valid certificate, this domain demonstrates evasion sophistication typical of modern crypto drainers.


The threat status of wallet-org-ldgr.pages.dev is ACTIVE. Immediate recommended actions include blacklisting the domain at DNS and endpoint levels, updating browser blocklists, and raising user awareness on wallet connection risks. Despite its elevation in detection systems, the domain remains accessible and poses a measurable risk to unsuspecting users. Remaining risk persists due to the domain’s resilience on legitimate infrastructure and the increasing automation of drainer deployment. Users are advised to verify all wallet connection URLs via official sources and use transaction simulation tools before approval.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.115

## Detection Status
- VirusTotal: 5 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d7aea9e3-5973-49ed-8085-66e990fef30c
- PhishDestroy: https://phishdestroy.io/domain/wallet-org-ldgr.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/wallet-org-ldgr.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/wallet-org-ldgr.pages.dev/
Last updated: 2026-03-22