# eng-ledgei-r.pages.dev — SUSPICIOUS

> eng-ledgei-r.pages.dev is an active crypto drainer impersonating Ledger. Flagged by 3 of 95 VirusTotal vendors. Verify safety on PhishDestroy immediately.

## Summary
PhishDestroy identifies eng-ledgei-r.pages.dev as an active crypto drainer impersonating Ledger hardware wallet authentication portals. This malicious domain is currently live and poses an elevated threat to users attempting to access cryptocurrency-related services.

This domain was flagged by 3 of 95 VirusTotal security vendors, has a Cloudflare registrar, and resolves to IP 188.114.97.3. The SSL certificate is issued by Google Trust Services, adding an initial layer of legitimacy that could mislead potential victims.

Users should avoid interacting with eng-ledgei-r.pages.dev entirely. Organizations are advised to block this domain at the network level and investigate any internal endpoints that may have accessed it. PhishDestroy users receive real-time updates when attempting to visit this domain, preventing accidental exposure to this crypto drainer.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/71fe91fc-4814-43ed-adaf-7a13e6ff6fc2
- PhishDestroy: https://phishdestroy.io/domain/eng-ledgei-r.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/eng-ledgei-r.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/eng-ledgei-r.pages.dev/
Last updated: 2026-03-22