# io-eng-ledger.pages.dev — MALICIOUS

> io-eng-ledger.pages.dev is a confirmed crypto drainer site, warned by 11/95 VirusTotal vendors. Avoid connecting wallets or entering details.

## Summary
Is io-eng-ledger.pages.dev Safe? PhishDestroy identifies this domain as an active crypto drainer site designed to steal cryptocurrency from unwary visitors.  PhishDestroy flags io-eng-ledger.pages.dev as a crypto drainer, a type of malicious website that tricks users into connecting their cryptocurrency wallets under false pretenses. These sites often mimic legitimate services, such as hardware wallet providers or blockchain explorers, to gain a user's trust before prompting them to connect a wallet for a fraudulent transaction. Once connected, the site can drain funds directly from the wallet without further user interaction.  This domain was flagged by 11 out of 95 security vendors on VirusTotal, indicating elevated risk. It resolves to IP 172.66.44.153, uses a Google Trust Services SSL certificate, and is registered through Cloudflare, Inc. Despite its professional appearance, the site's deceptive purpose is confirmed by its classification and the high number of security detections. Users should avoid interacting with this site entirely.  If you visited io-eng-ledger.pages.dev, disconnect your wallet immediately and revoke any connected permissions through your wallet provider's settings. Do not approve any transactions, even if the site prompts you. Run a malware scan on your device to ensure no additional threats were introduced. Report the domain to PhishDestroy for verification and further investigation. Always verify URLs carefully and use trusted bookmarks for cryptocurrency-related sites.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.153

## Detection Status
- VirusTotal: 11 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2f007f09-0435-43dc-aff2-748a5d72fce9
- PhishDestroy: https://phishdestroy.io/domain/io-eng-ledger.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/io-eng-ledger.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/io-eng-ledger.pages.dev/
Last updated: 2026-03-21