home-ledgelive-eng[.]pages[.]dev

home-ledgelive-eng.pages.dev has been identified as an active crypto drainer scam, with preliminary analysis confirming malicious intent to deceive users into connecting their cryptocurrency wallets. The domain is currently under investigation but remains operational, posing an imminent threat to unsuspecting visitors. This assessment is based on observed behavior consistent with wallet-draining campaigns, including misleading engagement tactics to coerce users into authorizing fraudulent transactions.

PhishDestroy's analysis reveals this domain exhibits several red flags: it remains undetected by 95 VirusTotal engines (6/95), is registered via Cloudflare, Inc., and resolves to IP address 188.114.96.3 under Google Trust Services' SSL certificate. While creation date and blocklist status are not specified in available intelligence, the absence of detections despite active hosting suggests a stealthy, emerging threat. The domain's use of Cloudflare's Pages.dev infrastructure further complicates detection, as such services are frequently abused for phishing campaigns.

To mitigate exposure to this crypto drainer, users should avoid interacting with home-ledgelive-eng.pages.dev entirely. If a wallet connection was authorized, revoke permissions immediately via the official wallet interface and transfer remaining funds to a new wallet. Organizations should block the domain at the network perimeter and monitor for outbound connections to 188.114.96.3. Cloudflare's infrastructure should be scrutinized for other similarly named domains, as threat actors often cycle through subdomains to evade detection.