logn-ledgrcom[.]pages[.]dev

PhishDestroy identifies the active domain logn-ledgrcom.pages.dev as a cryptocurrency-drainer phishing page currently under investigation for credential theft and wallet draining operations. The page masquerades as a legitimate ledger-branded service, attempting to trick visitors into connecting wallets and signing malicious transactions. No publicly documented drainer kit hash is associated with this domain at this time, suggesting either a new or custom deployment. This domain was flagged on Cloudflare Pages and resolves to IP 188.114.96.3. It carries a Google Trust Services SSL certificate, indicating active HTTPS enforcement. VirusTotal analysis currently reports 9/95 detections across leading AV engines, indicating it is not yet widely blacklisted. The domain was registered through Cloudflare, Inc., which provides privacy-protected registration masking the true owner. Google Safe Browsing (GSB) status is still under review, and third-party blocklist counts remain at zero, confirming its low but growing threat footprint. The domain remains active and accessible as of the latest scan. PhishDestroy recommends immediate network and DNS blocking of 188.114.96.3 and logn-ledgrcom.pages.dev. Users should avoid visiting or interacting with the page and report any wallet connection attempts to their security teams. The low detection rate and fresh infrastructure suggest rapid evolution, so continued monitoring and signature updates are essential. Remaining risk is assessed as moderate due to high potential impact despite low current detection.