# ledger-support-io-54t.pages.dev — SUSPICIOUS

> ledger-support-io-54t.pages.dev is a Ledger impersonating crypto drainer, flagged by 0 of 95 VirusTotal vendors. Verify this threat on PhishDestroy.

## Summary
PhishDestroy identifies an active phishing campaign using the domain ledger-support-io-54t.pages.dev to impersonate Ledger cryptocurrency wallet support. The threat is classified as brand impersonation with potential crypto-draining functionality, currently under investigation. This domain is part of a broader campaign targeting users seeking technical assistance for Ledger devices.  

This domain was flagged by 0 of 95 VirusTotal vendors, indicating a low detection rate despite its malicious intent. The domain is registered through Cloudflare, Inc., resolves to IP 172.66.47.180, and holds a Google Trust Services SSL certificate. The technical infrastructure leverages Cloudflare Pages for hosting, which provides anonymity and reduces immediate detection. The absence of detections on VirusTotal suggests the campaign is either newly deployed or employs evasion techniques to bypass initial scrutiny.  

The current status of this domain is active, with no known blocklist entries as of this report. Given the impersonation of a high-value cryptocurrency brand and the potential for financial theft, users are advised to avoid interacting with this domain or any associated links. PhishDestroy recommends verifying the legitimacy of any Ledger support domains using official communication channels. Users who may have interacted with this domain should immediately revoke any wallet permissions granted to third-party sites and report the incident to Ledger's official support team. Continuous monitoring of this domain is advised due to the evolving nature of such campaigns.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.180

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3a66e7b6-bf7e-4128-b5c5-4321b188e677
- PhishDestroy: https://phishdestroy.io/domain/ledger-support-io-54t.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledger-support-io-54t.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledger-support-io-54t.pages.dev/
Last updated: 2026-03-22