# ledger-live--people.pages.dev — SUSPICIOUS > ledger-live--people.pages.dev is a crypto drainer impersonating Ledger. Avoid this fake login page. Verify domains at PhishDestroy before entering credentials. ## Summary PhishDestroy identifies ledger-live--people.pages.dev as an active crypto drainer impersonating the Ledger brand. This domain currently remains unblocked and continues to pose a risk to users who may unknowingly interact with it. This domain resolves to IP 172.66.47.22 and operates under a Google Trust Services SSL certificate. Registered via Cloudflare, Inc., it has yet to be flagged by any of the 95 VirusTotal vendors and remains absent from all major blocklists. Current threat intelligence does not indicate an association with historical malicious campaigns or infrastructure. Users are strongly advised to avoid interacting with ledger-live--people.pages.dev. To mitigate risk, verify domains through PhishDestroy before submitting sensitive information. Organizations should consider proactively blocking this domain and monitoring network traffic for connections to its IP address or SSL certificate. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) - Target brand: Ledger ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 172.66.47.22 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/9dbddf92-d56c-42c9-868b-1fbd5d651c75 - PhishDestroy: https://phishdestroy.io/domain/ledger-live--people.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/ledger-live--people.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/ledger-live--people.pages.dev/ Last updated: 2026-03-28