# eng-ldger-live.pages.dev — SUSPICIOUS

> PhishDestroy identifies eng-ldger-live.pages.dev as a Ledger Live phishing page hosted on Cloudflare Pages. Check the full report.

## Summary
PhishDestroy has identified eng-ldger-live.pages.dev as a fake Ledger Live login portal engaged in phishing activity against cryptocurrency users. This fraudulent domain is currently active and has begun circulating in targeted campaigns designed to steal sensitive wallet credentials under the guise of a legitimate Ledger Live interface. Users tricked into entering their recovery phrases or private keys risk immediate asset compromise and irreversible financial losses.  

This domain resolves to IP address 172.66.47.147 and is registered through Cloudflare, Inc. As of today, none of the 95 VirusTotal security vendors have flagged this URL, indicating a low detection presence despite its malicious intent. The domain uses a Google Trust Services SSL certificate, increasing its authenticity to unsuspecting visitors. While technical indicators such as registrar and hosting platform may appear legitimate, user-side reconnaissance reveals the fraudulent nature—specifically, the mimicking of a trusted cryptocurrency wallet platform.  

The status of this threat remains active and under investigation. PhishDestroy advises all cryptocurrency users to manually verify any unexpected communication referencing ‘Ledger Live’ or similar wallet services. Always navigate directly to the official website (ledger.com) and never use links from emails, texts, or third-party sites. If you encounter this domain, report it immediately via official channels and avoid entering any credentials. This domain should be blocked at the network level where possible and flagged in organizational security tools.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.147

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/eng-ldger-live.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/eng-ldger-live.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/eng-ldger-live.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/eng-ldger-live.pages.dev/
Last updated: 2026-04-04