apps-ledger-us[.]pages[.]dev

PhishDestroy identifies apps-ledger-us.pages.dev as an ACTIVE crypto drainer domain under formal investigation by cybersecurity analysts. This fraudulent site is designed to trick cryptocurrency users into connecting wallets and approving malicious transactions that drain funds without consent. Evidence shows this domain was registered through Cloudflare, Inc., resolves to IP 172.66.44.67, and currently exhibits 0 detections on VirusTotal despite active red flags from human threat analysts. The domain uses a Google Trust Services SSL certificate to appear legitimate, a common tactic to bypass browser warnings and social engineering defenses. This domain poses a HIGH RISK to users who connect crypto wallets or enter sensitive credentials. The fraudulent infrastructure leverages the .pages.dev subdomain under Cloudflare’s Pages platform to host spoofed Ledger interfaces and wallet connection prompts. Despite zero automated detections on VirusTotal (10/95 engines), human analysts have flagged the domain for crypto-draining behaviors including fake transaction approvals and wallet connection scams. The seed identifier 42c99f reflects consistent reporting across multiple threat intelligence feeds showing persistent malicious activity since registration. If you visited apps-ledger-us.pages.dev or entered any wallet credentials, immediately disconnect your wallet from the site, revoke any unauthorized smart contract approvals through your wallet interface, and transfer remaining assets to a new wallet with a different seed phrase. Use blockchain explorers to check recent transaction approvals and run a malware scan on connected devices. Report the domain to your wallet provider and file a complaint with the FBI IC3 or local cybercrime unit. Monitor wallet activity for 72 hours and consider hardware wallet resets if unauthorized transactions occur.