# ledger-live-download-cdn-us.pages.dev — SUSPICIOUS

> ledger-live-download-cdn-us.pages.dev mimics Ledger's official site to push fake downloads. 0/95 VirusTotal detections. Check the full report for details.

## Summary
PhishDestroy identifies ledger-live-download-cdn-us.pages.dev as a clone site impersonating Ledger, the well-known hardware wallet brand, in order to trick users into downloading malicious software disguised as the official Ledger Live application.

This domain was flagged by PhishDestroy after analysis showed it uses Cloudflare for hosting, resolves to IP address 188.114.97.3, and holds a Google Trust Services SSL certificate. VirusTotal currently lists 0 detections out of 95 scans, meaning mainstream antivirus tools have not yet flagged it.

If you visited this site, do not download any files or enter any information. Close the browser immediately. Use an updated antivirus scanner to check your system. If you entered sensitive data, consider your device potentially compromised and contact Ledger support via their official website for guidance on securing your accounts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/90276860-5d20-4fba-a904-3ccb0340e0f5
- PhishDestroy: https://phishdestroy.io/domain/ledger-live-download-cdn-us.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledger-live-download-cdn-us.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledger-live-download-cdn-us.pages.dev/
Last updated: 2026-03-21