# first-ledger-live-app-eng-us.pages.dev — SUSPICIOUS

> Domain first-ledger-live-app-eng-us.pages.dev impersonates Ledger crypto wallet brand. Cloudflare-hosted phishing page on IP 188.114.96.

## Summary
Domain first-ledger-live-app-eng-us.pages.dev has been flagged for active brand impersonation targeting Ledger cryptocurrency wallet users. This deceptive domain mimics the legitimate Ledger platform to harvest sensitive credentials under the guise of a live application interface. PhishDestroy’s investigation confirms the threat remains unresolved as of the most recent scan, necessitating immediate caution for potential victims. 


PhishDestroy’s sieve engine detected this domain on 2024-06-05, with current intelligence indicating: 0 detections from 95 VirusTotal vendors, registration administered by Cloudflare, Inc., resolution to 188.114.96.3, and an SSL certificate issued by Google Trust Services. The infrastructure utilizes Cloudflare Pages, providing anonymity layers typical of phishing operations while maintaining plausible deniability through legitimate service provider channels. No historical blocklist entries were recorded at the time of analysis, underscoring the recency and evasive nature of this threat vector. 


This domain remains active and unblocked by major security vendors as of the latest update. Users must refrain from interacting with first-ledger-live-app-eng-us.pages.dev and verify all Ledger-related URLs through official channels. Recommendations include: (1) blocking the IP 188.114.96.3 at the network perimeter, (2) reporting the domain to security vendors via VirusTotal and PhishDestroy, and (3) educating users on identifying fraudulent URLs by comparing them to ledger.com. Given the absence of vendor detections, manual reporting is critical to accelerate defensive coverage against this evolving threat.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/fefd4cd6-2277-4633-8d91-98ea5380815c
- PhishDestroy: https://phishdestroy.io/domain/first-ledger-live-app-eng-us.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/first-ledger-live-app-eng-us.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/first-ledger-live-app-eng-us.pages.dev/
Last updated: 2026-03-22