in-ledger-desk[.]pages[.]dev

PhishDestroy identifies the domain in-ledger-desk.pages.dev as an active crypto drainer scam under investigation for fraudulent cryptocurrency transactions. This deceptive platform masquerades as a legitimate crypto ledger service to trick users into connecting wallets and authorizing unauthorized token transfers.

This domain was flagged by 12 of 95 VirusTotal vendors at the time of analysis, indicating it remains undetected by most antivirus solutions despite its malicious intent. Registered through Cloudflare, Inc., it operates under a Google Trust Services SSL certificate and resolves to IP address 172.66.47.139. The infrastructure’s lack of detection combined with its Cloudflare protection highlights a sophisticated evasion technique likely designed to bypass traditional security measures. As the threat evolves, the absence of blocklist entries underscores the urgency for proactive defense.

Users must treat in-ledger-desk.pages.dev as a HIGH-RISK domain and discontinue all interactions immediately. Avoid visiting, clicking links, or entering any credentials. Block traffic to 172.66.47.139 at the network level and update browser security settings to reject pages resolving to this IP. Report any wallet interactions to relevant blockchain security teams and local cybercrime units. Monitor accounts for unauthorized transactions and enable wallet-specific fraud alerts. Exercise extreme caution with unsolicited crypto service offers and verify domains through official channels before engaging.