# en-ledgr-uslive.pages.dev — SUSPICIOUS

> en-ledgr-uslive.pages.dev is a crypto drainer scam with 0/95 VirusTotal detections. Learn how this fraudulent domain impersonates legitimate services and what.

## Summary
PhishDestroy identifies en-ledgr-uslive.pages.dev as a potential cryptocurrency drainer posing under active investigation. This domain leverages Cloudflare’s infrastructure, hosting on IP 172.66.47.126 with a Google Trust Services SSL certificate to appear legitimate. Threat intelligence currently shows zero detections across 95 VirusTotal scanners, indicating this domain remains undetected by most antivirus engines despite suspicious behavior patterns.

Technical analysis reveals several red flags: the domain was registered through Cloudflare, Inc., a common choice for malicious actors seeking anonymity and rapid deployment. While the exact creation date is not disclosed in available feeds, the absence of detections suggests this infrastructure may have been operational for a limited duration, allowing threat actors to test and refine their attack chain. The domain’s evasion of detection aligns with the growing trend of cryptocurrency-focused phishing campaigns that employ short-lived domains to bypass security controls.

Users who have accessed en-ledgr-uslive.pages.dev should immediately disconnect from the internet and perform a full system scan using updated antivirus software. Review any recent cryptocurrency transactions, especially withdrawals or transfers, for unauthorized activity. If exposed, revoke any connected wallet permissions and consider transferring remaining funds to a new, isolated wallet. Report the domain to your security team and relevant cybercrime units such as the FBI IC3 or local cybercrime units. Monitor financial accounts closely and remain cautious of follow-on spear-phishing or social engineering attempts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.126

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/48f8ef83-5b5a-45e3-ad22-53b63f434590
- PhishDestroy: https://phishdestroy.io/domain/en-ledgr-uslive.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/en-ledgr-uslive.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/en-ledgr-uslive.pages.dev/
Last updated: 2026-03-22