# ldger--live-site.pages.dev — SUSPICIOUS

> ldger--live-site.pages.dev tricks users into connecting crypto wallets, draining funds after Ledger impersonation. Flagged by 1 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies active crypto-draining infrastructure at ldger--live-site.pages.dev that impersonates the Ledger hardware wallet brand in order to trick users into connecting their cryptocurrency wallets and stealing funds.

This domain was flagged by 1 of 95 VirusTotal vendors, is registered through Cloudflare, Inc., resolves to IP 188.114.97.3, and currently carries a Google Trust Services SSL certificate, indicating recent acquisition of a legitimate-looking certificate.

Users should treat ldger--live-site.pages.dev as hostile and avoid all interaction; verify any Ledger-related domain against PhishDestroy’s blocklist before visiting. Organizations are advised to block this domain and IP at perimeter controls and update user-awareness materials to highlight the active crypto-drainer impersonating Ledger.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/cf8e91e0-6c2b-4a4a-8d69-069ad0de6a68
- PhishDestroy: https://phishdestroy.io/domain/ldger--live-site.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ldger--live-site.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ldger--live-site.pages.dev/
Last updated: 2026-03-31