# webpage-start-ldger-io.pages.dev — SUSPICIOUS

> webpage-start-ldger-io.pages.dev (Cloudflare-hosted) is a crypto drainer phishing site with 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies webpage-start-ldger-io.pages.dev as an active crypto drainer phishing domain under investigation for deploying malicious scripts targeting cryptocurrency wallets.

This domain resolves to IP 172.66.44.137 and operates under Cloudflare, Inc. with a Google Trust Services SSL certificate. Current VirusTotal analysis shows 0/95 detection engines flagged the page as malicious, and the domain remains unlisted on major blocklists. The infrastructure leverages Cloudflare Pages for hosting, with the domain registered through Cloudflare's domain services.

Mitigation for this crypto drainer threat requires immediate avoidance of wallet connections to this domain. Users should verify destination URLs via trusted sources before interacting with any crypto-related pages. Enable hardware wallet signing for transactions and revoke any unintended smart contract approvals. Report the domain to PhishDestroy’s database and relevant cybersecurity platforms to increase detection coverage.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.137

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/5b3a4b1e-9d44-4a55-b2c4-6e0b0445f90f
- PhishDestroy: https://phishdestroy.io/domain/webpage-start-ldger-io.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/webpage-start-ldger-io.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/webpage-start-ldger-io.pages.dev/
Last updated: 2026-03-22