# ldger-login-help.pages.dev — MALICIOUS

> ldger-login-help.pages.dev is a credential phishing domain impersonating LDger, flagged by 10 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies ldger-login-help.pages.dev as an active credential phishing domain impersonating the LDger platform. The domain is currently operational and poses a direct threat to users through credential theft. This threat is classified as elevated due to its operational status and the specific focus on LDger account impersonation.  

This domain was flagged by 10 of 95 VirusTotal security vendors. It resolves to IP 172.66.46.220, is registered through Cloudflare, Inc., and utilizes a Google Trust Services SSL certificate. The VirusTotal detection ratio and reliance on Cloudflare’s infrastructure suggest this domain is actively leveraging reputable services to evade immediate detection. No creation date was provided in the available intelligence, but the domain’s operational status and SSL certificate issuance indicate recent deployment.  

The current status of this domain is active, and immediate action is required to mitigate risk. Users should avoid interacting with ldger-login-help.pages.dev and report any exposure to their IT security teams. Organizations are advised to block this domain at the network level and update endpoint protection rules to detect further campaigns leveraging similar infrastructure. Credential phishing remains a persistent threat, and proactive monitoring of LDger-related domains is strongly recommended.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.46.220

## Detection Status
- VirusTotal: 10 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6a9e1be6-af11-4565-804d-1ec5331075b3
- PhishDestroy: https://phishdestroy.io/domain/ldger-login-help.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ldger-login-help.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ldger-login-help.pages.dev/
Last updated: 2026-03-28