# en-live-ledgr-eng.pages.dev — SUSPICIOUS

> PhishDestroy flags en-live-ledgr-eng.pages.dev as a crypto drainer targeting unsuspecting users. Flagged by 0 of 95 VirusTotal vendors; avoid interaction.

## Summary
PhishDestroy identifies the domain en-live-ledgr-eng.pages.dev as an active crypto drainer campaign under investigation. This infrastructure is currently operational and leverages a deceptive landing page hosted on Cloudflare Pages to siphon cryptocurrency assets from victims through fraudulent transaction prompts. The campaign’s status remains active, with no confirmed takedown actions as of the latest assessment.  This domain was flagged by 0 of 95 VirusTotal vendors at the time of analysis, indicating zero detections despite its malicious nature. Registered via Cloudflare, Inc., the domain resolves to IP address 188.114.96.3 and operates under a Google Trust Services SSL certificate, which may enhance its credibility to potential victims. Additional technical indicators include its recent creation date and hosting on Cloudflare’s Pages platform, a common choice for threat actors to obfuscate malicious infrastructure. The absence of detections on VirusTotal suggests evasion tactics or delayed recognition by security vendors, warranting heightened scrutiny.  Given the active status of this crypto drainer and its current lack of detection coverage, PhishDestroy strongly advises organizations and end-users to implement immediate countermeasures. Block this domain and its associated IP (188.114.96.3) at the firewall and DNS levels to prevent accidental access. Educate users on recognizing crypto drainer tactics, such as unsolicited transaction prompts or fraudulent landing pages mimicking legitimate services. Monitor network traffic for connections to this domain or IP, and report any observed interactions to your security team or threat intelligence platforms. Proactive hunting for similar domains hosted on Cloudflare Pages is also recommended, as threat actors frequently rotate infrastructure to evade detection.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3e647e85-07c8-45eb-ac5e-59503d629a4a
- PhishDestroy: https://phishdestroy.io/domain/en-live-ledgr-eng.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/en-live-ledgr-eng.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/en-live-ledgr-eng.pages.dev/
Last updated: 2026-03-24