us-ledger-desk-live[.]pages[.]dev

PhishDestroy identifies us-ledger-desk-live.pages.dev as an active crypto drainer deployed on Cloudflare Pages. This fraudulent site mimics legitimate crypto ledger services to trick users into connecting crypto wallets and authorizing unauthorized transactions. The domain resolves to IP 172.66.47.159 and uses a Google Trust Services SSL certificate, which are tactics designed to appear trustworthy while hiding malicious intent. This domain was flagged by PhishDestroy’s automated pipeline with unique seed c032ee. VirusTotal currently shows 0 detections out of 95 engines as of the latest scan. The site is hosted on Cloudflare Pages, a legitimate platform often abused by threat actors to rapidly deploy malicious content. The SSL certificate issued by Google Trust Services adds a veneer of legitimacy, which is common in crypto drainer campaigns to bypass browser warnings and build user trust. The IP address 172.66.47.159 is part of Cloudflare’s infrastructure, making it harder to block without domain-level filtering. If you visited us-ledger-desk-live.pages.dev, immediately disconnect your wallet from any dApps or websites and revoke any unauthorized permissions using tools like Etherscan’s Token Approval or similar blockchain explorers. Do not interact further with the site or any links it provided. Report the domain to your wallet provider and consider running a malware scan on your device. For ongoing protection, use wallet protection extensions that block malicious domains and monitor transaction approvals in real time.