public-ledger-us[.]pages[.]dev

PhishDestroy identifies public-ledger-us.pages.dev as an active crypto drainer domain masquerading as a public ledger service, designed to steal cryptocurrency assets from unsuspecting users. The domain leverages Cloudflare Pages to host a convincing fake interface, luring victims into connecting their wallets under the guise of legitimate transactions. Once connected, the drainer silently siphons funds to attacker-controlled addresses, making detection difficult until after the damage is done. This threat specifically targets users seeking transparent financial services, exploiting their trust in well-known public ledger platforms. This domain resolves to IP 188.114.97.3 and operates with a valid SSL certificate issued by Google Trust Services, adding a veneer of legitimacy. VirusTotal currently flags the domain with 0/95 detections, indicating it evades most antivirus and security tooling at this time. Registered through Cloudflare, Inc., the domain employs Cloudflare’s infrastructure to obscure its true origin while maintaining high availability. While the exact creation date is not provided, the absence of detections suggests it is a recently deployed threat actively targeting crypto users. If you visited public-ledger-us.pages.dev or entered wallet credentials, immediately revoke wallet connections using your wallet provider’s security settings. Transfer remaining funds to a new, secure wallet and scan your device for malware using reputable antivirus software. Report the domain to your wallet provider and relevant cryptocurrency platforms to prevent further abuse. Stay vigilant by verifying URLs, avoiding unsolicited links, and using hardware wallets for critical transactions.