wallet-ledgeer[.]pages[.]dev
“Ledger Wallet – Secure Hardware Wallet for Crypto”
Observação armazenada
Contraste de títulos observado
Resumo das evidências
PhishDestroy identifies wallet-ledgeer.pages.dev as an active brand impersonation scam impersonating the legitimate Ledger hardware wallet brand. The domain employs a fraudulent page title identical to Ledger’s official product branding, misleading visitors into believing they are accessing a secure crypto wallet service. While no confirmed drainer kit payload was observed in this analysis, the site’s structure and content strongly suggest crypto-asset theft functionality, leveraging Ledger’s trusted reputation to deceive users. The operational model aligns with credential theft tactics, as the page mimics official Ledger branding to harvest sensitive wallet information or seed phrases.
This domain resolves to IP address 172.66.45.48 and is hosted on Cloudflare’s infrastructure, registered through Cloudflare, Inc. The SSL certificate is issued by Google Trust Services, which does not guarantee legitimacy. VirusTotal scanning reveals a detection ratio of 10 out of 95 security vendors, indicating moderate yet concerning suspicion. Google Safe Browsing (GSB) has not yet flagged this domain, and blocklist entries remain unverified in public databases. The domain was registered recently, though an exact creation date is not publicly available. Technical indicators such as the use of Cloudflare’s Pages.dev service and a Google-issued SSL certificate are commonly abused to evade detection and enhance perceived legitimacy.
As of this assessment, wallet-ledgeer.pages.dev remains actively online and fully operational, continuing to serve the impersonation content. Immediate corrective action is required: users should avoid accessing the site entirely. Organisations and individuals are advised to block the domain at the network and DNS levels, report the URL to Google Safe Browsing and browser security teams, and warn connected communities—particularly cryptocurrency users—to prevent financial loss. Despite its current activity, the domain’s risk profile remains high due to its impersonation nature and potential to evolve into a live crypto drainer. Persistent monitoring and proactive blocking are essential to mitigate further exposure.
Data Coverage
Inteligência de segurança de rede
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | wallet-ledgeer.pages.dev |
malicious | Sinkholed |
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 10/08/2026
10 fontes externas monitoradas Sem correspondência
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of wallet-ledgeer.pages.dev · checked Apr 18, 2026
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo