# docs-liveledgr.pages.dev — SUSPICIOUS

> docs-liveledgr.pages.dev hosts a crypto drainer posing as LiveLeadgr. VirusTotal shows 0/95 detections. Verify with PhishDestroy before clicking.

## Summary
PhishDestroy has identified docs-liveledgr.pages.dev as a crypto drainer impersonating LiveLeadgr, a legitimate lead generation platform. This domain leverages Cloudflare Pages to host a deceptive interface designed to trick users into connecting their cryptocurrency wallets, enabling unauthorized fund transfers. The threat actor behind this campaign is likely targeting users searching for business or lead generation tools, redirecting them to a fraudulent page that mimics the appearance of LiveLeadgr.  This domain resolves to IP address 172.66.46.249 and is registered through Cloudflare, Inc., which explains its uncanny ability to evade detection by hosting on a reputable CDN. VirusTotal currently shows zero detections out of 95 security vendors, underscoring its nascent and stealthy nature. The SSL certificate is issued by Google Trust Services, a tactic often used to lend false legitimacy to malicious sites. Given its active status and lack of blocklist inclusion at this stage, users must exercise heightened caution.  If you have visited docs-liveledgr.pages.dev, disconnect your cryptocurrency wallet immediately and revoke any permissions granted to unknown domains. Scan your system for malware and review wallet transaction histories for unauthorized activities. Report this domain to PhishDestroy to aid in blocking efforts and share with peers to prevent further victimization. Always verify URLs and use trusted sources for business tools.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.46.249

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/1c536d4a-2e7b-4540-a466-4560c7ec28c9
- PhishDestroy: https://phishdestroy.io/domain/docs-liveledgr.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/docs-liveledgr.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/docs-liveledgr.pages.dev/
Last updated: 2026-03-23