com-ledgrstat-portal[.]pages[.]dev

PhishDestroy identifies com-ledgrstat-portal.pages.dev as a currently active domain staging a generic phishing campaign designed to impersonate a Ledger statistics portal. This domain is currently under investigation but remains accessible and operational. All indicators suggest it is actively soliciting user input under false pretenses.

This domain was flagged by 1 of 95 VirusTotal vendors at the time of analysis, indicating it has not yet achieved widespread detection coverage. It is registered through Cloudflare, Inc., resolves to IP address 172.66.44.134, and operates under a Google Trust Services SSL certificate. The page title matches the domain exactly, and no blocklist entries were detected at the time of review. The infrastructure leverages Cloudflare Pages, a legitimate platform, to host the malicious content.

While the current risk level remains under investigation, the absence of detections and use of a trusted CDN increase the potential for successful deception. Users are strongly advised to avoid interacting with this domain and to report it through official channels. Security teams should consider blocking the domain at the network perimeter and monitoring for associated IOCs, including the IP and SSL certificate. Immediate user awareness and proactive threat hunting are recommended given the domain's active status and low initial detection rate.