project-ledgrwalite-bing[.]pages[.]dev

The domain project-ledgrwalite-bing.pages.dev is a confirmed phishing site engaged in brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. It presents itself as the 'Ledger Live Wallet | Official Secure Crypto Management App' to deceive users into interacting with fraudulent crypto management interfaces, posing an elevated risk of financial theft. No drainer kit was identified, but the site was actively used for cryptocurrency scams before being taken offline.

Technical indicators confirm the malicious nature of project-ledgrwalite-bing.pages.dev. As of analysis, 2 of 95 VirusTotal security vendors flagged the domain, including LevelBlue and Phishing Database. The domain was registered through Cloudflare, Inc. on September 19, 2025, and resolves to the IP address 188.114.97.3, hosted by Cloudflare in Canada. It appears on one security blocklist (PhishDestroy) and uses an SSL certificate issued by Google Trust Services / WE1. The site employed technologies such as HSTS, Cloudflare, and HTTP/3, and its page title explicitly mimicked Ledger's official branding.

Users who interacted with project-ledgrwalite-bing.pages.dev should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new, secure wallet. Enable two-factor authentication on all crypto-related accounts and monitor for unauthorized transactions. Report the phishing domain to Google Safe Browsing, the impersonated brand (Ledger), and platforms like PhishTank or the Anti-Phishing Working Group to aid in takedown efforts.