# ldger-download-usa.pages.dev — SUSPICIOUS

> PhishDestroy flags ldger-download-usa.pages.dev as a fake Ledger wallet phishing site; 0/95 VirusTotal detections, full report linked.

## Summary
PhishDestroy identifies ldger-download-usa.pages.dev as a counterfeit Ledger cryptocurrency wallet phishing site currently under active investigation for brand impersonation and credential theft.

This domain resolves to Internet Protocol address 172.66.47.44 and was registered through Cloudflare, Inc. As of the latest scan, 0 out of 95 VirusTotal vendors flagged the page, while the domain holds a Google Trust Services SSL certificate. The infrastructure’s age and trust scores remain unverified due to active review status.

Users encountering this domain should cease interaction immediately and verify wallet access only through Ledger’s official website or verified app stores. Report the domain to Cloudflare Abuse and update local blocklists to prevent accidental exposure. Organizations are advised to inspect DNS logs for outbound connections to 172.66.47.44 and block the IP to mitigate data exfiltration risks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.44

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2f8c8de3-97e7-4700-a69f-59e46a303ff4
- PhishDestroy: https://phishdestroy.io/domain/ldger-download-usa.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ldger-download-usa.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ldger-download-usa.pages.dev/
Last updated: 2026-03-28