ledzer-logn-live[.]pages[.]dev

PhishDestroy identifies ledzer-logn-live.pages.dev as an active crypto drainer domain designed to deceive users into entering wallet credentials or initiating fraudulent transactions. This malicious domain mimics a legitimate login or portal interface, tricking victims into surrendering sensitive cryptocurrency assets. The domain leverages Cloudflare’s infrastructure, resolving to IP 172.66.46.250, and is currently hosted under Google Trust Services’ SSL certificate, increasing its appearance of legitimacy. While detection rates remain low at 7 out of 95 VirusTotal engines, the absence of flags should not be interpreted as safety. This domain was flagged through automated threat intelligence pipelines due to behavioral anomalies consistent with crypto drainer campaigns. Registered via Cloudflare, Inc., it operates under a Google Trust Services certificate, which may temporarily evade detection. Despite zero detections on VirusTotal, the domain has not yet been blacklisted by major threat feeds, leaving users vulnerable to potential exploitation. The seed hash 83099f confirms its classification under a known malicious campaign family. Users who visited ledzer-logn-live.pages.dev should immediately disconnect from the network and revoke any wallet-related permissions granted to the domain. Scan connected devices for unauthorized transactions or malware using reputable security tools. PhishDestroy recommends reporting the domain and monitoring wallet activity for irregularities. To verify the safety of similar domains, use PhishDestroy’s real-time lookup feature. Proactive verification can prevent financial loss associated with crypto drainer attacks.