# doc-en-ledgor-livdesk.pages.dev — SUSPICIOUS

> PhishDestroy identifies doc-en-ledgor-livdesk.pages.dev as a crypto drainer phishing domain with 0/95 VirusTotal detections. Protect your crypto assets now.

## Summary
PhishDestroy’s automated pipeline flagged doc-en-ledgor-livdesk.pages.dev under seed 9584e4 as an active crypto-drainer phishing domain. The site mimics legitimate document-sharing portals to trick users into connecting cryptocurrency wallets and signing malicious transactions that silently drain balances. Given the absence of on-chain alerts and the low detection count on VirusTotal, this threat is currently categorized as under_investigation while deeper behavioral analysis continues.  This domain was registered through Cloudflare, Inc. and resolves to IP 172.66.44.185. It is hosted on Cloudflare Pages, secured with a Google Trust Services SSL certificate, and currently shows 0 detections out of 95 engines on VirusTotal. The active status indicates the campaign is live and propagating via phishing lures, social-engineering messages, or malvertising chains. Cloudflare’s fast-flux infrastructure complicates takedown, but behavioral clustering suggests a newly emergent strain rather than a recycled campaign.  To mitigate risk, users should avoid clicking links that point to pages.dev subdomains offering document previews or wallet “sign-in” prompts. Verify any unexpected file-sharing URL by manually typing the expected domain or using a URL-expansion service. Wallet users should revoke any recently approved but unused permissions via tools such as revoke.cash before connecting to unknown sites. Report the domain to PhishDestroy’s abuse feed and your wallet provider for on-chain monitoring.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.185

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/doc-en-ledgor-livdesk.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/doc-en-ledgor-livdesk.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/doc-en-ledgor-livdesk.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/doc-en-ledgor-livdesk.pages.dev/
Last updated: 2026-04-06