en-ledge-us[.]pages[.]dev

PhishDestroy identifies en-ledge-us.pages.dev as an active crypto drainer phishing domain hosted on Cloudflare Pages, resolving to IP 172.66.47.121 under Google Trust Services SSL. The domain currently shows 0 detections on VirusTotal out of 95 scans, indicating minimal detection coverage despite malicious intent. This suggests the threat actor may be evading traditional security measures or operating in early campaign stages.

This domain was flagged as a generic phishing host leveraging Cloudflare Pages for evasion, as it impersonates a legitimate service (Ledge) to trick users into connecting crypto wallets or submitting sensitive data. The infrastructure relies on Google Trust Services for SSL, which may lend false legitimacy to unsuspecting victims. Given the 9/95 VirusTotal score, this domain remains undetected by most antivirus engines, increasing the risk of successful exploitation.

If you visited en-ledge-us.pages.dev, immediately revoke any connected wallet permissions via tools like Revoke.cash or wallet provider settings. Scan devices for malware using reputable tools like Malwarebytes or Windows Defender. Report the domain to your browser vendor and PhishDestroy to aid in blocking efforts. Avoid interacting with similar URLs and verify domains via official channels before inputting credentials or wallet connections.