# ldger-support-usa.pages.dev — SUSPICIOUS

> Beware: ldger-support-usa.pages.dev is a suspected crypto drainer impersonating Ledger Support. Verify this domain on PhishDestroy—flagged by 0 of 95.

## Summary
The domain ldger-support-usa.pages.dev is currently under active investigation as a generic phishing page attempting to impersonate Ledger Support. This threat involves luring users into entering sensitive credentials or cryptocurrency wallet information under false pretenses, likely to facilitate fund theft. The domain remains unconfirmed but exhibits suspicious behavior warranting immediate scrutiny.  
PhishDestroy identifies this domain as unresolved, with VirusTotal currently showing 0 detections out of 95 vendors. The domain resolves to IP address 172.66.44.189, is registered through Cloudflare, Inc., and utilizes a Google Trust Services SSL certificate. Notably, this infrastructure raises eyebrows due to its association with a Pages.dev subdomain—a platform frequently abused for hosting deceptive content. With zero blocklist entries at the time of analysis and no recorded trust scores, the lack of detection underscores the importance of proactive verification.  
Given the active status of this threat and the absence of mainstream flagging, users are strongly advised to avoid interaction with this domain. Ledger users, in particular, should verify any support-related communications through official channels. PhishDestroy recommends blocking this domain at the network perimeter and monitoring for related Indicators of Compromise (IOCs). Update threat intelligence feeds to include 172.66.44.189 and investigate any associated network traffic. Vigilance against crypto drainer campaigns remains critical as threat actors continue to exploit perceived trust in hardware wallet ecosystems.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.189

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/0d33ba24-2e1c-414a-9b7d-cd18085941a9
- PhishDestroy: https://phishdestroy.io/domain/ldger-support-usa.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ldger-support-usa.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ldger-support-usa.pages.dev/
Last updated: 2026-03-22