# downalod-ldgr-live.pages.dev — SUSPICIOUS

> PhishDestroy identifies downalod-ldgr-live.pages.dev as a cryptocurrency credential theft domain flagged by 0 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies the domain downalod-ldgr-live.pages.dev as an active credential theft campaign impersonating Ledger Live, a leading cryptocurrency wallet application. The campaign is currently under investigation with a status classified as active. This domain poses a direct risk to users attempting to access legitimate Ledger Live services, as it may harvest login credentials and other sensitive data.  

This domain was flagged by 0 of 95 VirusTotal vendors, indicating it has not yet been widely detected as malicious despite its active status. It resolves to IP address 188.114.97.3, is registered through Cloudflare, Inc., and uses a Google Trust Services SSL certificate. The domain appears to leverage Cloudflare Pages to host its deceptive content, further complicating detection and takedown efforts.  

The current status of this domain remains active, suggesting ongoing malicious operations. Users and organizations are strongly advised to block access to this domain at the network level and conduct endpoint scans to detect any potential compromise. Immediate action is recommended to prevent credential theft and unauthorized access to cryptocurrency funds. Additionally, educating users about the risks of such impersonation campaigns and verifying URLs before entering sensitive information are critical steps in mitigating this threat.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/downalod-ldgr-live.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/downalod-ldgr-live.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/downalod-ldgr-live.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/downalod-ldgr-live.pages.dev/
Last updated: 2026-04-03