# safe-ledgerwallet--eng.pages.dev — MALICIOUS

> PhishDestroy identifies safe-ledgerwallet--eng.pages.dev as a crypto drainer impersonating Ledger. 12/95 vendors flagged this domain.

## Summary
PhishDestroy identifies safe-ledgerwallet--eng.pages.dev as an elevated-risk brand impersonation site targeting Ledger users. The domain is currently active and mimics legitimate Ledger branding to deceive visitors into revealing private keys or connecting wallet extensions. This is a crypto drainer attack vector designed to siphon cryptocurrency assets from unwitting victims.

This domain was flagged by 12 out of 95 VirusTotal security vendors. It resolves to IP 172.66.44.59 and is registered through Cloudflare, Inc. The site uses an SSL certificate issued by Google Trust Services, adding superficial legitimacy. The domain was detected as impersonating the Ledger brand and has been added to multiple blocklists due to its malicious activity.

Users should avoid interacting with this site entirely. Never enter seed phrases, private keys, or connect wallet applications to unknown domains. Always verify URLs against official Ledger websites and use PhishDestroy’s verification tools before clicking any links. If you suspect exposure, revoke any connected wallet permissions immediately and transfer remaining assets to a secure, offline wallet.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.59

## Detection Status
- VirusTotal: 12 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/c50390dd-c60e-471f-b167-9fa179a6e97f
- PhishDestroy: https://phishdestroy.io/domain/safe-ledgerwallet--eng.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/safe-ledgerwallet--eng.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/safe-ledgerwallet--eng.pages.dev/
Last updated: 2026-03-22