# ledgerlive-walet-us.pages.dev — SUSPICIOUS

> ledgerlive-walet-us.pages.dev is a Ledger impersonation site pushing a crypto drainer. Verify via PhishDestroy before interacting. VT score: 2/95

## Summary
ledgerlive-walet-us.pages.dev is an active Ledger brand impersonation domain hosting a crypto drainer payload. The site mimics the official Ledger Live wallet interface with a counterfeit login portal designed to siphon cryptocurrency wallet credentials and seed phrases. Its interface closely copies brand assets to deceive users familiar with the real Ledger ecosystem.  

PhishDestroy’s forensic analysis reveals this domain was flagged by 2 out of 95 VirusTotal security vendors. It resolves to IP 172.66.47.169 and was registered through Cloudflare, Inc. The SSL certificate is issued by Google Trust Services. This domain actively impersonates the Ledger brand in order to distribute a crypto drainer kit aimed at draining victim wallets upon credential submission.  

Current status: active and unresolved. Cloudflare has not yet suspended the domain despite low VT detection. PhishDestroy advises users to verify any Ledger-related link using PhishDestroy prior to access. Remaining risk is elevated due to active impersonation and drainer distribution. Users should avoid visiting this domain and report it via PhishDestroy to help reduce exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Ledger

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.169

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a72127a1-4fb9-483e-bfbe-884759ffcf24
- PhishDestroy: https://phishdestroy.io/domain/ledgerlive-walet-us.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ledgerlive-walet-us.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ledgerlive-walet-us.pages.dev/
Last updated: 2026-03-26