# en-ledgere-live.pages.dev — SUSPICIOUS

> PhishDestroy identifies en-ledgere-live.pages.dev as a crypto drainer with 0/95 VirusTotal detections. Avoid all interactions immediately.

## Summary
en-ledgere-live.pages.dev is a recently active domain operating as a crypto drainer, a type of fraudulent site designed to trick cryptocurrency holders into unknowingly transferring funds to attacker-controlled wallets. Instead of stealing login credentials, these sites often impersonate legitimate crypto services like Ledger by presenting fake wallet interfaces that prompt users to connect their wallets and sign malicious transactions. Once connected, the drainer silently approves token transfers or drains NFTs without the victim's explicit consent, exploiting the way blockchain wallets handle transaction signing. This domain specifically leverages cloudflare Pages to host a fake Ledger Live interface, making it appear legitimate at first glance while secretly siphoning digital assets.  This domain was flagged after Cloudflare registration through a Google Trust Services SSL certificate. VirusTotal currently shows 0 detections out of 95 scans, indicating it has not yet been widely blacklisted despite active campaigns. The domain resolves to IP 188.114.97.3, a Cloudflare IP address frequently associated with malicious Pages deployments. While the exact creation date remains unverified due to Cloudflare's privacy protections, the site's recent activity and lack of detections suggest it is a newly deployed threat.  If you visited en-ledgere-live.pages.dev or entered any information, disconnect your wallet immediately using the emergency disconnect feature in your wallet app. Revoke any suspicious token approvals through blockchain explorers like Etherscan or BscScan using the 'Token Approval' tool. Do not connect your wallet to any site unless you’ve verified the URL through official Ledger channels. Report the domain to your antivirus provider and consider transferring remaining assets to a new wallet with a fresh seed phrase. Stay alert for unexpected transaction confirmations and enable wallet activity alerts to detect unauthorized transfers early.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/270f8ea2-b829-427c-a3cb-59b06617ea18
- PhishDestroy: https://phishdestroy.io/domain/en-ledgere-live.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/en-ledgere-live.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/en-ledgere-live.pages.dev/
Last updated: 2026-03-22