ledgeer-app-live-desktop[.]pages[.]dev

PhishDestroy identifies ledgeer-app-live-desktop.pages.dev as a live crypto drainer currently impersonating a desktop application. This site is designed to trick users into connecting cryptocurrency wallets and draining funds under the guise of a legitimate application interface. The threat is active right now, with no detections on VirusTotal as of the latest scan using seed 259295.

This domain was flagged through PhishDestroy’s automated pipeline and assigned the unique seed identifier 259295. Technical analysis reveals it is registered through Cloudflare, Inc., uses a Google Trust Services SSL certificate for HTTPS obfuscation, and resolves to IP address 172.66.44.212. As of the latest data, VirusTotal shows 0 security engines detected the threat out of 95, indicating this drainer is currently undetected by most antivirus platforms. The domain is hosted on Cloudflare Pages, a legitimate service often abused by threat actors to rapidly deploy phishing and drainer sites.

If you visited ledgeer-app-live-desktop.pages.dev, disconnect your wallet immediately and revoke any permissions granted to suspicious domains via your wallet’s connected apps menu. Do not interact with wallet connection prompts or enter seed phrases. To verify the legitimacy of this domain, scan it using PhishDestroy’s free tool. Report any unauthorized transactions to your wallet provider and consider transferring remaining funds to a new wallet. Always use hardware wallets for critical assets and double-check URLs before connecting wallets. Monitor your transaction history for unusual activity.