home-page-en--ledgr-us[.]pages[.]dev

Is home-page-en--ledgr-us.pages.dev Safe?

This domain is currently under investigation as an active crypto-drainer phishing site impersonating the Ledger hardware wallet brand. The landing page is designed to trick users into connecting their wallets and signing malicious transactions that silently drain crypto assets. Because the threat revolves around cryptocurrency theft via deceptive transaction signing, the specific phishing subtype is classified as a crypto drainer rather than generic credential harvesting or brand impersonation without asset theft. The domain status is active and remains accessible at the time of analysis.

PhishDestroy identifies home-page-en--ledgr-us.pages.dev as hosted on IP 188.114.96.3 (ASN 13335, Cloudflare). The site is registered through Cloudflare, Inc. and secured with a Google Trust Services LLC SSL certificate issued to the domain. VirusTotal currently shows 4 of 95 vendors flagging the URL, while the IP address 188.114.96.3 is flagged by 0 of 69 vendors. The domain was created on 2024-05-14 and has not been added to any public blocklists. Trust scores from VirusTotal remain neutral, with no reputation penalties recorded against the domain or its associated IP at this time.

At present, the domain remains accessible and the threat is under active investigation; therefore, the risk level is designated as under_investigation. Users should avoid interacting with home-page-en--ledgr-us.pages.dev entirely and should report the URL to their security teams or via threat-intel platforms. Block the domain at DNS, firewall, and endpoint levels using the seed identifier 3b311a for consistent tracking. If you have visited this site and connected a wallet or entered sensitive data, revoke any unauthorized wallet connections immediately, transfer remaining assets to a clean wallet, and conduct a full device scan using updated antivirus tools.