ledzer-live-view[.]pages[.]dev

PhishDestroy identifies ledzer-live-view.pages.dev as an active crypto drainer scam posing as a legitimate service. This domain leverages Cloudflare’s infrastructure to obscure its origins while impersonating a live streaming platform, specifically targeting users with deceptive login or wallet-connect prompts designed to siphon cryptocurrency assets. The threat is not generic phishing—it is a specialized credential theft and crypto drainer operation focused on unauthorized fund extraction through fake authentication flows. The domain resolves to IP 188.114.96.3 and uses a Google Trust Services SSL certificate to appear legitimate, masking malicious intent behind a veneer of security.

This domain has been flagged by 2 out of 95 VirusTotal security vendors, indicating low but notable detection—often a sign of emerging or evasive threats. Registered via Cloudflare, Inc., it operates under the Pages.dev subdomain service, which is frequently abused for phishing and malware distribution due to its free hosting and fast deployment capabilities. While no creation date is provided, the active scam status combined with low VT detection suggests recent deployment aimed at capitalizing on user trust in cloud infrastructure.

Users who visited ledzer-live-view.pages.dev should immediately inspect browser extensions, revoke any connected crypto wallet permissions through your wallet’s interface, and scan devices with a reputable antivirus tool like Malwarebytes or Windows Defender. Avoid re-engaging with the site and report the domain to your wallet provider and local cybercrime units. Monitor crypto wallets and transaction histories for unauthorized transfers—crypto transactions are irreversible. If funds are stolen, file a report with local law enforcement and blockchain forensics teams using transaction hashes. Do not provide seed phrases or private keys on ANY website, even if it appears legitimate.