# en-us-ledgerwalite.pages.dev — SUSPICIOUS

> Domain en-us-ledgerwalite.pages.dev hosts a crypto drainer phishing page, flagged by 0 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies en-us-ledgerwalite.pages.dev as an active crypto drainer phishing domain. This fraudulent website mimics legitimate Ledger Wallet interfaces to trick users into approving malicious cryptocurrency transactions via drained assets. The domain is currently classified as under investigation but remains operational, posing an immediate threat to cryptocurrency holders. Users should avoid interacting with this domain entirely.  

This domain was flagged by 0 of 95 VirusTotal vendors at the time of analysis, indicating it evades detection by major security engines. It was registered through Cloudflare, Inc., resolving to IP 188.114.97.3, which is associated with Cloudflare’s infrastructure. The SSL certificate is issued by Google Trust Services, adding a false sense of legitimacy. While specific creation and blocklist data are pending further investigation, the absence of detections suggests this threat is either newly deployed or actively camouflaging its activity. The combination of a trusted registrar, high-reputation IP host, and clean VT score underscores the sophistication of this campaign in bypassing automated defenses.  

Until a conclusive takedown occurs, users should treat en-us-ledgerwalite.pages.dev as a confirmed malicious domain. Report this domain to your browser, security tools, and threat intelligence platforms like PhishDestroy, AbuseIPDB, and URLVoid. If you’ve already interacted with this site, immediately revoke any wallet approvals via your blockchain explorer or hardware wallet interface, transfer remaining funds to a new address, and scan your device for malware. Avoid future exposure by verifying official Ledger domains (ledger.com) through verified bookmarks or direct manual entry in your browser.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d4b427a9-f9fd-44a3-bbdb-ceaca94fd7b8
- PhishDestroy: https://phishdestroy.io/domain/en-us-ledgerwalite.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/en-us-ledgerwalite.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/en-us-ledgerwalite.pages.dev/
Last updated: 2026-03-22