secure-ledgerlogin[.]pages[.]dev

PhishDestroy identifies secure-ledgerlogin.pages.dev as an active crypto drainer impersonating the Ledger brand. The site is hosted on Cloudflare Pages and resolves to IP 188.114.97.3. With 10 out of 95 VirusTotal security vendors flagging it, this domain poses an elevated risk to cryptocurrency users seeking to log in to their Ledger hardware wallets. This domain was flagged on April 12, 2024, for brand impersonation and crypto theft. It was registered through Cloudflare, Inc. and uses a Google Trust Services SSL certificate for added credibility. The domain leverages Cloudflare Pages to appear legitimate while hosting a fake Ledger login portal designed to steal wallet credentials and drain cryptocurrency assets. The low VirusTotal detection rate (10/95) highlights the sophistication of this threat, as many security tools may not yet recognize it. If you visited secure-ledgerlogin.pages.dev, immediately disconnect your device from the internet. Do not enter any wallet credentials or private keys. Scan your device with reputable antivirus software and consider transferring your assets to a new wallet via a verified Ledger device. Use PhishDestroy to verify any suspicious domains before interacting with them.