en-app-ledgrr[.]pages[.]dev

PhishDestroy identifies en-app-ledgrr.pages.dev as a domain associated with a generic phishing threat, specifically targeting users with a crypto drainer scheme. There is no indication of brand impersonation or the use of a known drainer kit at this time, but the domain primarily serves to compromise cryptocurrency assets through deceptive methods.

Technical indicators include a VirusTotal scan showing 0 detections out of 95 engines, indicating the domain has not yet been flagged by major antivirus systems. The domain resolves to IP address 188.114.97.3 and uses a Google Trust Services SSL certificate, which can lend an appearance of legitimacy. It was registered through Cloudflare, Inc., a common provider for privacy and shielding in web hosting. The domain's creation date is not specified, but there are no Google Safe Browsing (GSB) blacklists or blocklist entries currently associated with it.

The status of en-app-ledgrr.pages.dev remains active and under investigation as new intelligence is gathered. Security teams and users are advised to avoid interacting with the website until a definitive risk assessment is completed. Users should confirm any suspicious activity related to this domain through PhishDestroy and refrain from submitting sensitive or crypto wallet credentials. The absence of detections on VirusTotal does not guarantee safety, as phishing operators often evade initial scans.