wet-ledger-live[.]pages[.]dev

PhishDestroy identifies wet-ledger-live.pages.dev as an active crypto drainer campaign impersonating the Ledger brand to steal cryptocurrency assets. This fraudulent domain mimics the official Ledger Live interface, tricking users into connecting wallets and approving malicious transactions that drain funds. Cloudflare-hosted infrastructure and a Google Trust Services SSL certificate lend false legitimacy, while the absence of VirusTotal detections (4/95) highlights the need for proactive threat intelligence. This domain was flagged for brand impersonation targeting Ledger users. Key technical indicators include registration through Cloudflare, Inc., an SSL certificate issued by Google Trust Services, and resolution to IP 188.114.97.3. The page remains undetected by security engines as of current checks, emphasizing evolving evasion tactics. Threat actors commonly exploit free subdomains (pages.dev) to rapidly deploy scams before takedowns occur. If you accessed wet-ledger-live.pages.dev, disconnect your wallet immediately and revoke any unauthorized permissions via your wallet’s security settings. Scan devices for malware and monitor accounts for suspicious transactions. Report the domain to PhishDestroy for blacklisting and avoid interacting with similar Ledger impersonation pages. Never enter seed phrases or private keys on unverified sites.