# portal-ldgerhardware-wallet.pages.dev — MALICIOUS

> PhishDestroy flags portal-ldgerhardware-wallet.pages.dev as an active crypto drainer impersonating Ledger hardware wallets.

## Summary
PhishDestroy identifies portal-ldgerhardware-wallet.pages.dev as an active crypto drainer domain masquerading as a Ledger hardware wallet interface. This threat directly targets cryptocurrency users by intercepting and draining wallet funds through malicious transaction signatures. The elevated risk level reflects confirmed malicious behavior and persistent availability.

This domain was flagged by 11 of 95 VirusTotal security vendors, indicating strong malicious detection consensus. It resolves to IP 188.114.96.3 and is registered through Cloudflare, Inc., leveraging Google Trust Services SSL certificates for deceptive legitimacy. The domain operates under Cloudflare Pages, providing infrastructure commonly abused for phishing and malware distribution. Multiple threat intelligence sources have documented this crypto drainer's seed identifier 9859a4 across active campaigns.

Users must avoid interacting with this domain or any links directing to portal-ldgerhardware-wallet.pages.dev. Never enter wallet credentials or connect hardware devices to this site. Verify all URLs through PhishDestroy before any transaction or login attempt. If exposed, revoke any connected wallet permissions immediately and transfer remaining assets to a secure, offline wallet. Report this domain to your antivirus provider and PhishDestroy for blacklisting to protect other users.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 11 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a7901b3b-5ab7-47e6-a5e9-bda9661a104c
- PhishDestroy: https://phishdestroy.io/domain/portal-ldgerhardware-wallet.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/portal-ldgerhardware-wallet.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/portal-ldgerhardware-wallet.pages.dev/
Last updated: 2026-04-14