ledgr-logn-us[.]pages[.]dev

PhishDestroy identifies ledgr-logn-us.pages.dev as a crypto drainer impersonating a login portal, likely targeting cryptocurrency users. This domain is actively hosted on Cloudflare and resolves to IP 172.66.44.115, with a Google Trust Services SSL certificate. VirusTotal currently reports 5/95 detections, indicating it has not yet been widely flagged by security vendors. This domain was flagged by PhishDestroy’s automated systems using seed 4e4ebc. The threat level is under investigation, but the lack of detections on VirusTotal suggests it may be a newly deployed or evasive campaign. The domain’s registration via Cloudflare and use of a legitimate SSL certificate (Google Trust Services) are common tactics to evade detection and appear trustworthy to unsuspecting users. If you visited ledgr-logn-us.pages.dev, do not enter any credentials or cryptocurrency wallet information. Disconnect from the site immediately and revoke any permissions granted during the visit. Use PhishDestroy’s verification tools to scan the domain for additional indicators of compromise. Monitor your wallet and account activity for suspicious transactions, and consider revoking any connected permissions as a precaution. Report the domain to PhishDestroy to aid in further investigation.