leger-live-wallet-start[.]pages[.]dev

PhishDestroy identifies leger-live-wallet-start.pages.dev as an active crypto-draining phishing domain designed to steal cryptocurrency from unsuspecting victims. This fraudulent site lures users with false promises of a "live wallet" or cryptocurrency management tools, only to surreptitiously drain funds from connected wallets. Once accessed, the site triggers unauthorized transactions, transferring assets to attacker-controlled addresses without the victim’s consent. Users who interact with this page risk irreversible financial losses, as crypto transactions are typically irreversible and lack consumer protections. This domain was flagged by 13 out of 95 security vendors on VirusTotal, indicating elevated risk and widespread suspicion. It is registered through Cloudflare, Inc. and resolves to the IP address 172.66.47.110. The site operates under a Google Trust Services SSL certificate, which adds a veneer of legitimacy but does not guarantee safety. While domain registration dates are not provided in our dataset, the site’s infrastructure points to recent deployment, consistent with the tactics of opportunistic threat actors exploiting trending topics such as crypto wallets. If you have visitedleger-live-wallet-start.pages.dev, disconnect any cryptocurrency wallets immediately and revoke any unauthorized permissions granted to the site. Do not interact further with the page or any linked addresses. If you entered credentials or private keys, consider your wallet compromised and transfer remaining funds to a new, secure wallet. Report the incident to your wallet provider and local cybercrime authorities. Always verify URLs, use hardware wallets for storage, and enable multi-factor authentication on all crypto accounts. Stay vigilant—scammers frequently mimic legitimate services to deceive users.