# web-ledgr-liv-nav-logen.pages.dev — SUSPICIOUS

> PhishDestroy flags web-ledgr-liv-nav-logen.pages.dev as a crypto drainer active since 2024. VirusTotal shows 0/95 detections—verify every link before you click.

## Summary
PhishDestroy identifies the domain web-ledgr-liv-nav-logen.pages.dev as a live crypto drainer designed to empty cryptocurrency wallets the moment a victim connects. The site mimics legitimate Web3 login portals, tricking users into granting wallet permissions that silently transfer tokens to attacker-controlled addresses. This threat is automated, fast, and often reaches victims through social media or phishing messages promising free tokens or exclusive NFT mints.  This domain was flagged on 2024-05-08 and registered through Cloudflare, Inc. It resolves to IP 172.66.45.6 and currently uses a Google Trust Services SSL certificate to appear trustworthy. Despite having zero detections on VirusTotal (0/95 scanners), the domain shows clear behavioral indicators of a drainer, including obfuscated JavaScript and wallet permission requests on page load.  If you visited this site, do not connect your wallet or sign any transactions. Revoke any permissions immediately using tools like revoke.cash or Phantom’s connection manager. Clear browser cache and cookies. Run a full antivirus scan. Report the domain to PhishDestroy and consider rotating wallet keys if you signed anything. Stay safe—always verify URLs and never approve unexpected wallet connections.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.45.6

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/60220543-8147-42b5-943f-6e5b413409c9
- PhishDestroy: https://phishdestroy.io/domain/web-ledgr-liv-nav-logen.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/web-ledgr-liv-nav-logen.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/web-ledgr-liv-nav-logen.pages.dev/
Last updated: 2026-03-23