# ledger-live-help-us.pages.dev — MALICIOUS

> ledger-live-help-us.pages.dev poses a high-risk phishing threat impersonating Ledger. Avoid interaction and verify Ledger sites carefully to stay safe.

## Summary
PhishDestroy identifies ledger-live-help-us.pages.dev as a high-risk brand impersonation threat targeting Ledger users. This domain is designed to deceive victims by mimicking Ledger’s branding, aiming to steal sensitive credentials or personal information.

The domain was registered on February 21, 2026, through Cloudflare, Inc., and resolves to IP address 172.66.47.107. It currently appears on one security blocklist and has been flagged by 14 out of 95 security vendors on VirusTotal. The page title encountered during investigation was "Suspected phishing site | Cloudflare," confirming its malicious intent.

As of now, the domain is taken offline, reducing immediate risk. Users are advised to remain vigilant by verifying URLs and avoiding suspicious links claiming to be Ledger support. PhishDestroy recommends continued monitoring of similar domains and maintaining updated security solutions to mitigate exposure to phishing attacks.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Ledger
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.107
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["braden.ns.cloudflare.com", "sreeni.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "Criminal IP", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "ESET", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019b9a09-6802-70dc-9546-9333cc4efc27.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/d73b4742-4f34-4795-9d0c-68360ab07a02
- PhishDestroy: https://phishdestroy.io/domain/ledger-live-help-us.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledger-live-help-us.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledger-live-help-us.pages.dev/
Last updated: 2026-03-19