log-en-ladgr[.]pages[.]dev

PhishDestroy identifies log-en-ladgr.pages.dev as a high-risk generic phishing domain impersonating Ledger’s login portal, hosted on Cloudflare Pages. This fraudulent site employs a drainer kit designed to harvest cryptocurrency wallet credentials and initiate unauthorized transactions. The page title—"Ledger® — Login & Getting Started"—mirrors Ledger’s legitimate branding to deceive users into entering sensitive account details. This domain resolves to IP 188.114.97.3 and was registered through Cloudflare, Inc. VirusTotal reports a detection score of 1/95 security vendors, indicating minimal coverage despite active malicious hosting. The site operates with a valid SSL certificate issued by Google Trust Services, enhancing its credibility to unsuspecting victims. Cloudflare Pages’ infrastructure obscures the true origin, complicating takedown efforts. As of current analysis, log-en-ladgr.pages.dev remains active and unblocked by major threat intelligence platforms. Immediate user action includes blocking the domain and IP (188.114.97.3) at the network level. Remaining risk is high due to ongoing availability and the drainer’s potential to compromise Ledger users’ assets. PhishDestroy recommends reporting this domain to Google Safe Browsing and updating browser blocklists to prevent further exposure.