ledgezvstart-wallet[.]pages[.]dev

PhishDestroy identifies ledgezvstart-wallet.pages.dev as an active crypto drainer posing as a legitimate wallet service, carrying an elevated risk level per seed 8ed1ec.

This domain resolves to IP 172.66.47.175 and was registered through Cloudflare, Inc. PhishDestroy notes that 11 of 95 VirusTotal security vendors flag this domain, indicating consistent detection of malicious behavior. The SSL certificate is issued by Google Trust Services, which is not indicative of legitimacy due to the ability of threat actors to obtain free certificates for malicious infrastructure. The domain is hosted on Cloudflare Pages, a legitimate service often abused by threat actors for phishing and crypto drainer campaigns. The combination of low detection rates, abuse of reputable services, and clear intent to deceive users underscores the elevated risk posed by this domain.

Mitigation for crypto drainers like ledgezvstart-wallet.pages.dev requires cautious verification of all wallet-related domains. Users should avoid entering seed phrases, private keys, or sensitive credentials into any site purporting to be a wallet service unless the domain has been independently verified through trusted sources such as PhishDestroy. Always cross-reference URLs with official project websites and avoid clicking links from unsolicited messages. If exposure occurs, immediately revoke permissions for connected wallets and transfer remaining funds to a new wallet. Implementing hardware wallet signing for transactions can reduce exposure to web-based crypto drainers.