ledjje-com-start[.]pages[.]dev

PhishDestroy identifies ledjje-com-start.pages.dev as a suspected crypto drainer posing as a legitimate service. This domain leverages Cloudflare Pages hosting to obscure its origin while impersonating a plausible interface to trick users into connecting crypto wallets and initiating unauthorized token transfers. The payload mechanism is suspected to involve malicious JavaScript that drains tokens when wallet permissions are authorized, typical of modern crypto phishing campaigns. Only 6 out of 95 VirusTotal scanners currently flag this domain, which does not mean it is safe—it reflects the lag in detection updates for emerging threats. This domain was flagged on seed 7410b8 and is hosted at IP 172.66.47.115 through Cloudflare Pages, a platform often abused by threat actors due to its fast provisioning and content delivery features. The site uses a Google Trust Services SSL certificate to appear legitimate, bolstering user trust. VirusTotal shows 0 detections as of the latest scan, indicating it may be newly deployed or using evasion techniques not yet detected by signature-based tools. If you visited ledjje-com-start.pages.dev, do not connect your crypto wallet or enter any credentials. Disconnect your wallet immediately using your browser’s task manager or by revoking connected app permissions in your wallet settings. Scan your device with updated antivirus and browser security extensions. Report the domain to PhishDestroy and local cybersecurity authorities. Monitor your wallet for unauthorized transactions and consider a hardware wallet for enhanced security.