# home-ledger-web.pages.dev — SUSPICIOUS

> PhishDestroy issues a warning about home-ledger-web.pages.dev hosting a crypto drainer. VirusTotal confirms 1/95 detections.

## Summary
PhishDestroy’s real-time threat intelligence network has flagged home-ledger-web.pages.dev as an active crypto drainer domain designed to steal cryptocurrency from unsuspecting users. This fraudulent site mimics legitimate financial ledger services to trick victims into connecting cryptocurrency wallets, where malicious scripts then drain digital assets without consent. The domain leverages Cloudflare Pages for hosting and a Google Trust Services SSL certificate to appear legitimate at first glance, but underlying infrastructure points to malicious intent.  Security analysis reveals that home-ledger-web.pages.dev was registered through Cloudflare, Inc. and currently resolves to IP address 172.66.47.173. VirusTotal analysis shows only 1 out of 95 participating security vendors have flagged this domain, indicating low detection coverage due to its recent emergence and evasion tactics. This domain is actively distributing a crypto drainer script identified under threat seed 0d951b, and its use of a legitimate SSL certificate from Google Trust Services further enhances its deceptive credibility.  If you have visited home-ledger-web.pages.dev or interacted with any page under this domain, immediately disconnect your cryptocurrency wallet and scan your device for unauthorized transactions. Do not approve any unexpected wallet connection requests. Report this domain to PhishDestroy for verification and block it using your browser or network defenses. Always verify URLs and use trusted sources before entering sensitive financial information.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.173

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2fb0dacf-73cc-4a16-8e6e-60238a23e76e
- PhishDestroy: https://phishdestroy.io/domain/home-ledger-web.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/home-ledger-web.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/home-ledger-web.pages.dev/
Last updated: 2026-03-30