# ledger-live-web-en.pages.dev — SUSPICIOUS

> ledger-live-web-en.pages.dev impersonates Ledger brand, resolving to IP 172.66.44.124. 0 of 95 VirusTotal vendors flagged it, yet it poses brand impersonation.

## Summary
PhishDestroy identifies ledger-live-web-en.pages.dev as a brand impersonation domain actively under investigation for mimicking Ledger, a leading cryptocurrency wallet provider. This domain is currently flagged as suspicious and requires immediate user caution due to its potential to deceive visitors into disclosing sensitive information. The risk level remains under review pending further analysis, but the impersonation tactic alone warrants heightened vigilance.  

This domain, ledger-live-web-en.pages.dev, exhibits several suspicious indicators confirmed by concrete data points. It resolves to IP address 172.66.44.124, is registered through Cloudflare, Inc., and has not been flagged by any of the 95 VirusTotal security vendors, scoring 0/95 detections. While it holds an SSL certificate issued by Google Trust Services, this does not guarantee legitimacy. Additional scrutiny reveals it is a newly observed domain with no historical trust scores available, further increasing uncertainty about its safety. The use of a Cloudflare-registered subdomain under pages.dev adds another layer of obfuscation, commonly employed by threat actors to avoid traditional blocklists.  

As of current assessment, ledger-live-web-en.pages.dev remains active and poses a credible brand impersonation risk targeting Ledger users. PhishDestroy recommends exercising extreme caution and avoiding any interaction with this domain, including visiting the site or entering sensitive information. Users who may have interacted with this domain are advised to review their Ledger accounts for unauthorized activity, enable multi-factor authentication, and report the domain to Ledger’s official fraud reporting channels. Always verify URLs against official Ledger domains (e.g., ledger.com, ledger-live.com) before engaging.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.124

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f5fed543-5d6f-444e-8a4c-c3d2ef8661a3
- PhishDestroy: https://phishdestroy.io/domain/ledger-live-web-en.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledger-live-web-en.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledger-live-web-en.pages.dev/
Last updated: 2026-03-22