# ldegrr-live-eng.pages.dev — SUSPICIOUS

> ldegrr-live-eng.pages.dev is a suspected crypto drainer phishing site with 0/95 VirusTotal detections. Block it and avoid linking crypto wallets.

## Summary
PhishDestroy identifies ldegrr-live-eng.pages.dev as an active crypto drainer phishing domain currently under investigation. This fraudulent site poses a direct threat to cryptocurrency users by tricking visitors into connecting their wallets, which can result in unauthorized fund transfers and asset loss. Criminals often deploy such schemes through compromised or lookalike domains that mimic legitimate services, exploiting user trust to execute malicious transactions. The domain resolves to IP 188.114.96.3 and uses a Google Trust Services SSL certificate, adding a false veneer of legitimacy to deceive visitors.  This domain was flagged through automated threat intelligence pipelines due to its suspicious configuration and deployment via Cloudflare Inc., a common tactic used by threat actors to obfuscate origin and evade detection. VirusTotal currently shows zero detections out of 95 security engines, highlighting the delay in signature-based detection against emerging threats. The domain is hosted on Cloudflare Pages, a legitimate service often abused for short-lived phishing campaigns. Its active status indicates ongoing operations targeting unsuspecting users.  If you visited this site, disconnect your wallet immediately and revoke any unauthorized permissions via your wallet’s settings or reputable blockchain explorers like Etherscan or Solscan. Do not interact with transaction prompts or sign messages you didn’t initiate. Report the domain to your wallet provider and consider resetting device security settings. Monitor wallet activity closely and enable transaction alerts. Use browser extensions like MetaMask’s phishing detection or services like ESET Smart Security to block known fraudulent domains in real time.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/248553a3-5f89-4899-a062-174b0973df39
- PhishDestroy: https://phishdestroy.io/domain/ldegrr-live-eng.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ldegrr-live-eng.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ldegrr-live-eng.pages.dev/
Last updated: 2026-03-24