home-io-ledger-en[.]pages[.]dev

PhishDestroy identifies home-io-ledger-en.pages.dev as an active crypto drainer posing as a Ledger hardware wallet interface. The domain mimics legitimate cryptocurrency services to trick users into connecting wallets and authorizing malicious transactions that drain funds. Security analysts confirm this is not a generic phishing attempt but a targeted scheme designed to exploit Ledger users specifically. This domain was flagged by 4 out of 95 VirusTotal security vendors, indicating elevated risk despite using a Google Trust Services SSL certificate. Registered through Cloudflare, the domain resolves to IP 172.66.44.74 and remains active in distribution. The combination of low VirusTotal detection rate, use of a trusted SSL issuer, and Cloudflare hosting demonstrates evasion techniques commonly deployed by crypto drainer operators. If you visited home-io-ledger-en.pages.dev or entered any wallet credentials or transaction approvals, immediately disconnect your wallet, revoke any unauthorized permissions via your wallet app or blockchain explorer, and transfer remaining funds to a new wallet. Never approve transactions from unknown devices or browser tabs. Use hardware wallet verification for all transactions and verify URLs through official Ledger channels before any interaction.