start-ledgerdeskto-eng[.]pages[.]dev

PhishDestroy identifies start-ledgerdeskto-eng.pages.dev as an active cryptocurrency drainer domain currently under investigation. This fraudulent site poses as a legitimate Ledger desktop portal to trick users into connecting their crypto wallets and approving malicious transactions that silently drain funds. This domain was flagged by PhishDestroy with a unique seed identifier c1599e. VirusTotal currently shows 0 detections out of 95 security engines, indicating it has evaded most automated defenses. The site resolves to IP address 172.66.44.90 and operates under a Google Trust Services SSL certificate, using Cloudflare as its registrar and hosting provider, which helps obscure its true origin and prolongs its operational lifespan. If you visited start-ledgerdeskto-eng.pages.dev, immediately disconnect your wallet, revoke any suspicious permissions through your wallet's settings, and transfer remaining assets to a clean wallet. Scan your device with updated antivirus software and consider rotating all wallet credentials. Report the domain to your wallet provider and relevant cybercrime authorities. Do not interact with any prompts or transaction approvals from this site, as it is designed to steal your cryptocurrency assets.