ledgr-live-walts[.]pages[.]dev

PhishDestroy identifies ledgr-live-walts.pages.dev as an active crypto drainer targeting users of Ledger Live wallets. This malicious domain employs deceptive branding to trick visitors into connecting compromised wallet applications, resulting in unauthorized cryptocurrency transfers. The site’s fraudulent nature is evidenced by its use of Cloudflare hosting and a Google Trust Services SSL certificate to appear legitimate while evading early detection systems. ledgr-live-walts.pages.dev resolves to IP address 172.66.47.183 through Cloudflare, Inc., and currently shows 0 detections out of 95 on VirusTotal, remaining undetected by major antivirus engines as of the latest scan. No blocklist entries or trust score degradations have been recorded, indicating this domain is still in early operational stages. The SSL certificate issued by Google Trust Services provides a false sense of security, while the .pages.dev subdomain structure mimics legitimate developer or staging environments. Users should immediately avoid interacting with ledgr-live-walts.pages.dev or any similar domains claiming to be Ledger Live interfaces. To mitigate risk, always navigate directly to official Ledger websites using verified bookmarks or search results. Enable hardware wallet security features such as passphrase protection and transaction approval on device. Verify any suspicious domain on PhishDestroy before entering credentials or connecting wallet applications. Report this domain immediately to help expand detection coverage and protect the crypto community.