# ledgrre-com.pages.dev — SUSPICIOUS

> PhishDestroy warns: ledgrre-com.pages.dev is a confirmed crypto drainer impersonating Ledger, flagged by 1 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies ledgrre-com.pages.dev as an active crypto drainer posing as a legitimate Ledger login portal. The fraudulent domain is currently engaged in credential harvesting activities designed to illicitly extract cryptocurrency wallet credentials and private keys from unsuspecting users. This threat remains in active operation as of the latest assessment with no visible takedown actions at this time.

This domain was flagged by 1 of 95 VirusTotal security vendors, demonstrating extremely low detection despite clear malicious characteristics. Registered through Cloudflare, Inc., the domain resolves to IP address 172.66.46.245 and operates under an SSL certificate issued by Google Trust Services, suggesting an attempt to appear legitimate through HTTPS encryption. While specific creation dates and blocklist counts require additional intelligence to verify, these technical indicators combined with the low VirusTotal detection rate exemplify sophisticated evasion tactics employed by modern crypto drainer operators.

Users are strongly advised to immediately cease all interactions with ledgrre-com.pages.dev and verify any potential exposure through PhishDestroy's real-time verification tools. Implement network-level blocking for this domain and associated IP address 172.66.46.245 to prevent accidental access. In addition to technical blocking measures, users should enable multi-factor authentication on all cryptocurrency-related accounts and consider transferring assets to hardware wallets where possible. Report any confirmed interactions with this domain to PhishDestroy's abuse team for domain takedown coordination and victim support.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.46.245

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a7e4f90e-e920-413e-b6dd-4911be385577
- PhishDestroy: https://phishdestroy.io/domain/ledgrre-com.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledgrre-com.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledgrre-com.pages.dev/
Last updated: 2026-04-01