us-ledger-usa[.]pages[.]dev

PhishDestroy identifies us-ledger-usa.pages.dev as an active crypto drainer domain designed to trick users into connecting cryptocurrency wallets, enabling unauthorized fund transfers. This deceptive site mimics official ledger service interfaces to harvest private keys and drain digital assets from unsuspecting visitors. Unlike phishing pages that merely steal login credentials, this specifically targets crypto wallets by prompting users to connect their wallets through malicious smart contract interactions, making it a critical threat to blockchain users. This domain was flagged by a single VirusTotal security vendor out of 95 analyzed, with resolution to IP 172.66.47.108 through Cloudflare's infrastructure. The SSL certificate issued by Google Trust Services lends false credibility to the scam, while the .pages.dev subdomain structure suggests recent creation through Cloudflare's Pages service. Unlike traditional phishing domains that remain static for months, this site exhibits behavior typical of crypto drainers that rapidly deploy and modify infrastructure to evade detection. If you visited us-ledger-usa.pages.dev recently, immediately disconnect your wallet from any active connections and transfer remaining funds to a secure wallet not previously connected to this domain. Do not approve any unexpected wallet connection requests or transaction approvals. Scan your device with reputable antivirus software to ensure no malware was installed during your visit. Report this domain to your wallet provider and consider revoking any wallet permissions granted to this malicious site through blockchain explorer tools. Stay vigilant as new domains with similar patterns emerge daily in crypto drainer campaigns.