# en-us-ledgior-io.pages.dev — SUSPICIOUS

> Beware! en-us-ledgior-io.pages.dev runs a crypto drainer scam impersonating Ledger. Verify safety on PhishDestroy before interacting.

## Summary
PhishDestroy identifies en-us-ledgior-io.pages.dev as an active crypto drainer scam, posing severe theft risks to cryptocurrency users.

This domain was flagged after resolving to IP 172.66.44.204 via Cloudflare, Inc., with VirusTotal reporting 1 out of 95 security vendors detecting malicious activity. While the domain holds a valid SSL certificate from Google Trust Services, its low detection rate and suspicious infrastructure suggest recent deployment. Cloudflare Pages hosting indicates an attempt to exploit legitimate service providers for concealment.

Mitigation requires immediate avoidance of this domain and any associated links. Cryptocurrency users should verify URLs through PhishDestroy’s real-time scanner before inputting wallet credentials or transaction details. Never enter seed phrases, private keys, or connect wallets to unverified sites. Report this domain to PhishDestroy and relevant blockchain security teams to prevent further victimization.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.204

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/e43e8e56-f268-47fa-820a-66974a576249
- PhishDestroy: https://phishdestroy.io/domain/en-us-ledgior-io.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/en-us-ledgior-io.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/en-us-ledgior-io.pages.dev/
Last updated: 2026-04-12