eng-ledger-download[.]pages[.]dev

PhishDestroy identifies eng-ledger-download.pages.dev as an active crypto-draining phishing site designed to trick users into downloading malicious software. The domain mimics legitimate financial tools—specifically a cryptocurrency ledger—to steal private keys or install drainer scripts that siphon digital assets. Victims who interact with the fake download may unknowingly authorize unauthorized transactions from their wallets. This is a high-stakes threat targeting digital currency holders seeking secure financial tools.

This domain was flagged on Cloudflare Pages with a Google Trust Services SSL certificate and resolves to IP 188.114.97.3. According to VirusTotal analysis, it currently shows 0 detections out of 95 security engines, indicating low detection coverage—making it even more dangerous to unwary users. The site’s infrastructure is hosted on Cloudflare Pages, a known service for both legitimate and malicious deployments, and was registered under Cloudflare, Inc. The active status and lack of detection underscore the need for caution among cryptocurrency users.

If you visited eng-ledger-download.pages.dev or downloaded anything from it, immediately disconnect from the internet, revoke any permissions granted to connected wallets, and scan your device with reputable antivirus software. Do not interact with wallet prompts or sign any transactions after visiting this domain. Report the incident to your wallet provider and consider transferring remaining assets to a clean, air-gapped wallet. Monitor blockchain activity closely for unauthorized transfers. Always verify software sources through official websites and trusted channels before downloading financial tools.