# discover-ledger-live-login.pages.dev — MALICIOUS

> Discover-ledger-live-login.pages.dev mimics Ledger for credential theft. PhishDestroy identifies 10/95 VirusTotal flags. Avoid entering data.

## Summary
PhishDestroy identifies that discover-ledger-live-login.pages.dev operates as a brand impersonation scam targeting Ledger users. This fraudulent domain leverages the recognizable Ledger brand to deceive visitors into surrendering sensitive credentials or installing malicious software under the guise of accessing a legitimate Ledger Live login portal. The threat is elevated due to the domain's active status and its use of deceptive naming conventions that closely mirror official Ledger services, specifically the 'discover-ledger-live-login' prefix which mimics the legitimate Ledger Live platform. Users searching for secure access to their Ledger accounts risk being redirected to this malicious site through phishing emails, fake ads, or compromised search results.  This domain exhibits multiple red flags confirming its malicious intent. PhishDestroy analysis reveals that the domain was registered through Cloudflare, Inc., a tactic often used to obscure the true origin of fraudulent sites. Further investigation shows that the domain resolves to IP address 188.114.97.3, which has been associated with malicious activity. Most critically, VirusTotal flags the domain with a score of 10/95, indicating that 10 out of 95 security vendors have identified it as malicious or suspicious. The SSL certificate issued by Google Trust Services adds a veneer of legitimacy, but this does not guarantee safety. The combination of these technical indicators—elevated VirusTotal detection, dubious registrar, and suspicious IP association—strongly suggests this domain is part of a coordinated credential theft campaign.  If you have visited discover-ledger-live-login.pages.dev, assume your data may have been compromised. Do not use this domain for any logins or transactions. If you entered credentials or sensitive information, change your Ledger account passwords immediately and enable two-factor authentication if not already active. Scan your device for malware using a reputable antivirus tool. Report the domain to Ledger's official fraud reporting channels and to PhishDestroy for further analysis. Avoid interacting with this domain or any links associated with it in the future. For secure access to Ledger services, always use the official website ledger.com or the authenticated Ledger Live application from verified sources.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 10 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6d84d69d-160a-4ec0-a7b0-d96059ddefc9
- PhishDestroy: https://phishdestroy.io/domain/discover-ledger-live-login.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/discover-ledger-live-login.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/discover-ledger-live-login.pages.dev/
Last updated: 2026-03-22