# secure-ledgerlogin.pages.dev — MALICIOUS

> Ledger wallet drainer detected at secure-ledgerlogin.pages.dev: 10/95 VirusTotal detections as a crypto drainer impersonating Ledger.

## Summary
PhishDestroy identifies secure-ledgerlogin.pages.dev as an active crypto drainer impersonating the Ledger brand. The site is hosted on Cloudflare Pages and resolves to IP 188.114.97.3. With 10 out of 95 VirusTotal security vendors flagging it, this domain poses an elevated risk to cryptocurrency users seeking to log in to their Ledger hardware wallets.  This domain was flagged on April 12, 2024, for brand impersonation and crypto theft. It was registered through Cloudflare, Inc. and uses a Google Trust Services SSL certificate for added credibility. The domain leverages Cloudflare Pages to appear legitimate while hosting a fake Ledger login portal designed to steal wallet credentials and drain cryptocurrency assets. The low VirusTotal detection rate (10/95) highlights the sophistication of this threat, as many security tools may not yet recognize it.  If you visited secure-ledgerlogin.pages.dev, immediately disconnect your device from the internet. Do not enter any wallet credentials or private keys. Scan your device with reputable antivirus software and consider transferring your assets to a new wallet via a verified Ledger device. Use PhishDestroy to verify any suspicious domains before interacting with them.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 10 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/efeb4657-30f8-4b7a-a420-71c2dd15eaaa
- PhishDestroy: https://phishdestroy.io/domain/secure-ledgerlogin.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/secure-ledgerlogin.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/secure-ledgerlogin.pages.dev/
Last updated: 2026-03-28