# know-ldger-wllt.pages.dev — SUSPICIOUS

> PhishDestroy warns: know-ldger-wllt.pages.dev is a crypto drainer phishing site with 1/95 VirusTotal detections.

## Summary
PhishDestroy identifies know-ldger-wllt.pages.dev as an active crypto drainer phishing domain designed to steal cryptocurrency wallet credentials and initiate unauthorized transfers. This malicious site mimics legitimate financial interfaces to deceive users into entering private keys or connecting wallets, enabling direct asset theft. Security research confirms this domain exhibits all hallmarks of a cryptocurrency-focused phishing operation.  This domain was flagged through PhishDestroy's automated monitoring pipeline on seed e2dd3c. VirusTotal analysis shows only 1 out of 95 security vendors currently detect this threat (1.05% detection rate). The domain is registered through Cloudflare, Inc. and resolves to IP address 172.66.47.149 via Google Trust Services SSL certificates. Current threat intelligence indicates this infrastructure has been active in recent campaigns targeting cryptocurrency users. The domain shows signs of recent registration with active hosting infrastructure, suggesting ongoing malicious operations.  Users who visited this domain should immediately check their cryptocurrency wallets for unauthorized transactions. Disconnect any wallet connections made through this site and revoke any permissions granted to unknown domains. Run a full malware scan on devices used to access this domain. Report any suspicious transactions to your wallet provider and relevant cryptocurrency exchanges. Consider transferring remaining assets to a newly generated wallet address. Monitor financial accounts for unusual activity and enable two-factor authentication where available. Users should verify all future cryptocurrency-related URLs through PhishDestroy's verification tools before entering sensitive information.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.149

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/know-ldger-wllt.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/know-ldger-wllt.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/know-ldger-wllt.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/know-ldger-wllt.pages.dev/
Last updated: 2026-04-02