# ladger-liv-wallet-download.pages.dev — SUSPICIOUS

> ladger-liv-wallet-download.pages.dev acts as a crypto drainer with 0/95 VirusTotal detections. This Cloudflare-hosted domain mimics legitimate crypto wallet.

## Summary
PhishDestroy identifies ladger-liv-wallet-download.pages.dev as an active crypto drainer campaign, designed to steal cryptocurrency funds by tricking users into connecting their wallets. This fraudulent site lures victims under the guise of a Ledger wallet download, exploiting the trusted Ledger brand to deceive visitors into entering sensitive wallet credentials or granting malicious transaction approvals. Once connected, the drainer silently transfers funds to attacker-controlled wallets, often without the victim’s immediate awareness.  This domain was flagged due to zero detections on VirusTotal (0/95) as of the latest scan, indicating it remains undetected by most antivirus engines. The site was registered via Cloudflare, Inc., resolving to IP 188.114.96.3 with a Google Trust Services SSL certificate, leveraging legitimate infrastructure to appear credible. The domain’s recent creation and use of a Pages.dev subdomain suggest an opportunistic, short-lived campaign targeting crypto users during high-activity periods.  If you visited ladger-liv-wallet-download.pages.dev, immediately disconnect your wallet from any suspicious sites and revoke any unauthorized connections through your wallet’s interface. Do not enter seed phrases, private keys, or transaction approvals on this domain. Report the URL to your wallet provider and monitor your transaction history for unauthorized activity. Consider transferring remaining funds to a secure, hardware-backed wallet.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/df36001e-02be-49ba-8c98-489feb4d963b
- PhishDestroy: https://phishdestroy.io/domain/ladger-liv-wallet-download.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ladger-liv-wallet-download.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ladger-liv-wallet-download.pages.dev/
Last updated: 2026-03-21