# eng-ledgeir-io-x.pages.dev — SUSPICIOUS

> eng-ledgeir-io-x.pages.dev is a confirmed crypto-draining phishing site. PhishDestroy verifies 2/95 security vendors detected it.

## Summary
PhishDestroy identifies eng-ledgeir-io-x.pages.dev as an active crypto-draining phishing page hosted on Cloudflare Pages.

This domain was flagged by only 2 out of 95 VirusTotal security partners, indicating weak detection coverage despite its elevated risk level. The page resolves to IP 172.66.47.99 and uses a Google Trust Services certificate to appear legitimate. Registrar data shows Cloudflare, Inc. as the provider, a common choice for attackers seeking anonymity and rapid deployment.

If you visited this page, disconnect your wallet immediately and run a malware scan on your device. Do not approve any suspicious transaction requests. Report the domain to PhishDestroy for deactivation and warn others on social media to prevent further victimization.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.99

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f59b0777-db49-48c6-8338-ad83f7660d6e
- PhishDestroy: https://phishdestroy.io/domain/eng-ledgeir-io-x.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/eng-ledgeir-io-x.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/eng-ledgeir-io-x.pages.dev/
Last updated: 2026-03-26